How to Remove a Virus from iPhone (What Is Really Going On, 2026)

Quick answer: Your iPhone almost certainly does not have a virus. Because iOS sandboxes every app and Apple reviews the App Store, true iPhone malware is extremely rare. What you are seeing is almost always a scam pop-up in Safari, calendar spam, or an unwanted configuration profile - not an infection. Close the scam tab, clear Safari data, delete any unknown calendar subscription and any profile you do not recognise, and you are done. No app can “scan and remove a virus” on a normal iPhone.

If a web page just told you “Your iPhone has 5 viruses, tap to remove them”, take a breath: that page cannot see inside your phone and cannot install anything by itself. It is a scareware advert designed to rush you into tapping. The steps below fix the real causes of the symptoms people mistake for a virus, in order.

Signs it is a scam, not a real infection

• A full-screen pop-up in Safari claims your iPhone is infected, your battery is damaged, or you have won a prize - often with a countdown or fake Apple logo.
• Your calendar fills with events you never created, each linking to a dodgy website.
• Safari suddenly redirects you, your homepage or search engine changed, or ads appear on sites that never had them.
• A profile or “VPN” you do not remember installing shows up in Settings.
• Apps you did not download appear on the Home Screen (much rarer, and worth checking).

None of these is a virus in the traditional sense. They are web pages and settings you can remove yourself. If your worry is really about a Windows or Mac machine instead, see how to know if your computer has a virus - the situation there is genuinely different.

Step 1 - Close the scam pop-up and clean Safari

Do not tap any button inside the pop-up, not even “Close” or “OK” - the whole page is a trap.

1. Open the Safari tab switcher (the two-squares icon) and swipe the offending tab away, or close all tabs.
2. Turn on airplane mode for a moment if a pop-up keeps reloading, then reopen Safari to a blank tab.
3. Clear the site data: Settings - Apps - Safari - Clear History and Website Data.
4. Back in Safari settings, switch on Block Pop-ups and Fraudulent Website Warning.

That removes the malicious page and the cached scripts that kept it reappearing. These pop-ups are a mobile cousin of desktop adware; if you also see them on a computer, our guide on how to remove adware covers that side.

Step 2 - Delete spam calendar subscriptions

If your Calendar is full of spam events, you accidentally subscribed to a malicious calendar (usually by tapping “OK” on a shady site). Remove it:

1. Open Settings - Calendar - Accounts.
2. Look for a Subscribed Calendar you do not recognise.
3. Tap it and choose Delete Account.

The spam events vanish with the subscription. Do not just delete the events one by one - the subscription would keep adding more.

Step 3 - Remove unknown configuration or MDM profiles

A shady app or site can ask you to install a configuration profile or MDM profile that can change settings, redirect traffic or watch what you do. On a personal iPhone you almost never need one.

1. Open Settings - General - VPN & Device Management.
2. If you see any profile you did not deliberately install (for work or school), tap it and choose Remove Profile.
3. Enter your passcode to confirm.

If this menu is empty, good - there is nothing shady installed. Only keep profiles you recognise, such as one your employer or school asked you to add.

Step 4 - Check Safari extensions and reset your search engine

Rogue Safari extensions can inject ads or hijack your searches.

1. Go to Settings - Apps - Safari - Extensions and turn off or delete anything you do not recognise.
2. In Settings - Apps - Safari - Search Engine, set it back to a normal choice (Google, Bing, DuckDuckGo) if it changed on its own.

Step 5 - Delete apps you do not recognise

While real iPhone malware is very rare, a low-quality app can still bombard you with ads or track you more than you would like. Touch and hold any app you do not remember installing, choose Remove App - Delete App, and reinstall trusted apps only from the App Store.

Step 6 - Update iOS, then factory reset only as a last resort

If odd behaviour continues after all of the above:

• Update iOS (Settings - General - Software Update). Updates patch the security holes that scam pages and rare exploits rely on.
• If problems truly persist, back up your photos and data, then Erase All Content and Settings (Settings - General - Transfer or Reset iPhone). Set the phone up fresh and restore from a clean backup, reinstalling apps from the App Store.

A factory reset is almost never necessary for a “virus”, because there usually is not one - but it does give you a guaranteed clean slate.

When it IS worth worrying

For the vast majority of people, an iPhone “virus” is a scam page, not an infection. Two real exceptions exist. A jailbroken iPhone removes Apple’s protections and can genuinely run malware - undo the jailbreak by updating or restoring iOS. And targeted mercenary spyware is real but extremely rare and aimed at a very small number of high-profile people; if you could plausibly be a target, keep iOS updated and turn on Lockdown Mode (Settings - Privacy & Security - Lockdown Mode).

Takeaway

Nine times out of ten, “how to remove a virus from iPhone” really means “how do I stop this scary pop-up”. Close the tab, clear Safari, remove any spam calendar and unknown profile, and your iPhone is clean - because it was never infected to begin with. Keep iOS updated, install only from the App Store, and ignore any web page that claims to have found viruses on your phone.