Android Secret USSD Codes Directory & Spyware Risk Scanner (2026)

Look up verified USSD diagnostic dialer codes (*#21#, *#62#, ##002#, *#*#4636#*#*) by phone brand and run an interactive 8-point Android spyware & stalkerware audit.

Facebook X (Twitter)WhatsApp LinkedIn

Android Secret USSD Codes & Spyware Risk Scanner — Interactive Console

Runs locally in your browser • Instant output

1. Interactive USSD & MMI Diagnostic Code Directory

Filter by Android OEM skin to copy or dial official MMI forwarding & hardware inspection codes.

Code	OEM / Scope	Diagnostic Purpose	Expected Safe Output vs Red Flag	Action
*#21#	All / Universal GSM	Unconditional Call, SMS & Data Forwarding Status	Voice: Not Forwarded \| SMS: Not Forwarded \| Data: Not Forwarded Forwarded to an unknown +country code or unfamiliar mobile number	Dial
*#62#	All / Universal GSM	Forwarding When Unreachable / Out of Coverage	Not Forwarded or carrier voicemail gateway number Unknown external number capturing missed calls or voicemails	Dial
*#67#	All / Universal GSM	Call Forwarding When Busy / Rejecting Call	Voice: Not Forwarded (or official carrier voicemail) Redirects rejected calls to a third-party listening number	Dial
##002#	All / Universal GSM	Master Eraser: Cancel All Call & SMS Forwarding	Erasure was successful (All diversions cleared immediately) MMI error if carrier blocks USSD—contact carrier if forwarding persists	Dial
*#06#	All / Universal GSM	Display Hardware IMEI-1, IMEI-2 & EID Serial	Matches IMEI printed on your SIM tray and original box Mismatched or zeroed IMEI indicates baseband tampering or cloned device	Dial
##4636##	Google Pixel / Stock	Android Testing Menu, Radio Info & App Usage History	Normal LTE/NR tower handoffs & expected recently used apps 2G-only forced downgrade (IMSI catcher risk) or hidden stalkerware running	Dial
#0#	Samsung One UI	Samsung Hardware Diagnostics (Sensors, Mic, Camera, Touch)	All sensors idle until explicitly tested Mic/camera busy or failing due to background recording lock	Dial
*#0228#	Samsung One UI	Samsung Battery & Voltage ADC Status	Normal voltage (~3.8V–4.3V) and cool idle temperature (<35°C) High idle current draw (>450mA screen-off) & warm temperature (>41°C)	Dial
*#9900#	Samsung One UI	Samsung SysDump & Kernel Log Inspector	Standard system dump options & clean logcat state Unauthorized debug logs enabled by physical attacker	Dial
##6484##	Xiaomi HyperOS	Xiaomi CIT Hardware & Sensor Diagnostic Suite	All 30+ hardware sub-tests pass without conflict Audio loopback or camera module locked by background process	Dial
##284##	Xiaomi HyperOS	Generate Xiaomi Full Bug Report & WakeLock Dump	Clean battery history without persistent partial wakelocks Hidden untitled package holding PARTIAL_WAKE_LOCK 24/7	Dial
*#899#	OnePlus / Oppo	EngineerMode Hardware, RF Band & GPS Inspector	Standard carrier band aggregation & normal PCB thermals Abnormal GPS polling or forced GSM 2G fallback	Dial

2. Interactive 8-Symptom Android Spyware & Permission Risk Checklist

Check any indicator observed on your phone to compute a live 0–100 Spyware Threat Score and step-by-step removal plan.

Threat Score: 8/100 — LOW RISK (CLEAN)

Unknown service enabled in Settings → Accessibility → Installed Apps+25 pts

Stalkerware abuses Accessibility APIs to read WhatsApp/Signal messages, log keystrokes, and auto-grant permissions.

Unfamiliar app active in Settings → Security → Device Admin Apps+20 pts

Malicious Device Admins prevent uninstallation by graying out the 'Uninstall' button.

Google Play Protect is turned OFF or warnings are suppressed+15 pts

Commercial spyware installers explicitly disable Play Protect during physical installation.

Dialing *#21# or *#62# shows forwarding to an unknown phone number+15 pts

Indicates carrier-level call/SMS diversion or SIM swap configuration.

Phone runs noticeably warm in pocket with >25% idle battery drain+8 pts

Continuous ambient mic recording, WebRTC screen streaming, or GPS polling prevents CPU deep sleep.

Unexplained background mobile data / Wi-Fi upload spikes (>500MB/mo)+7 pts

Exfiltrating call recordings, photos, and keystroke logs consumes steady upstream bandwidth.

Unknown app granted 'Notification Access' or 'Display Over Other Apps'+5 pts

Allows spyware to silently intercept 2FA OTPs and draw invisible phishing overlays.

'Install Unknown Apps' enabled for Chrome, Files, or messaging apps+5 pts

Allows silent dropper APKs to be sideloaded outside Google Play verification.

Targeted Remediation Plan (1 Active Findings)

[BATTERY_WARM] Check Settings → Battery → Usage by Apps (Show system processes) to spot top screen-off consumers.

Ready

Embed / Cite This Tool (Markdown & HTML)

GitHub / Reddit Markdown Badge

[![Android Secret USSD Codes & Spyware Risk Scanner](https://img.shields.io/badge/ZerosUniverse-Free_Tool-ff6a00)](https://www.zerosuniverse.com/tools/android-ussd-spyware-scanner/)

Blog / Documentation HTML Citation

<a href="https://www.zerosuniverse.com/tools/android-ussd-spyware-scanner/">Android Secret USSD Codes & Spyware Risk Scanner — ZerosUniverse</a>

2026 Android USSD / MMI Call Forwarding & Spyware Audit Code Table

2026 Verified Reference

Quick Answer & 2026 Technical Summary (android secret ussd codes spyware check)Updated 2026 Standard

Dialing `*#21#`, `*#62#`, and `*#67#` queries your mobile carrier's Home Subscriber Server (HSS) to verify whether your voice calls, SMS, or data streams are being silently forwarded. Note that USSD codes only detect carrier-level call/SMS diversion—modern stalkerware requires auditing Android Accessibility Services and Device Admin apps.

Check All Diversions: *#21# | Check Unreachable: *#62# | Erase All Forwarding: ##002#

Master Reset Code: ##002# (Clears all GSM diversions)

Hardware Identity: *#06# (IMEI / EID Verification)

Radio Telemetry: *#*#4636#*#* (Usage & Cell Info)

USSD / MMI Code	Diagnostic Function	Safe Baseline Output	Reset / Remediation Action
`*#21#`	Unconditional Call, SMS & Data Forwarding Status	Voice / SMS / Async: Not Forwarded	Dial ##21# or ##002# to clear unauthorized numbers
`*#62#`	Diversion When Unreachable / Out of Signal	Not Forwarded (or Official Carrier Voicemail)	Dial ##62# if an unknown external number appears
`#67# / #61#`	Diversion When Busy (#67#) or Unanswered (#61#)	Not Forwarded (or Carrier Voicemail Gateway)	Dial ##67# and ##61# to disable conditional rules
`##002#`	Universal GSM Master Forwarding Erasure Switch	Call Forwarding Erasure Was Successful	Instantly wipes all unconditional & conditional rules
`##4636##`	Android Hidden Testing, App Usage & Radio Menu	Shows real LTE/NR RSRP & last-launched apps	Audit Usage Statistics for hidden background apps
`*#06#`	IMEI-1, IMEI-2 & eSIM EID Hardware Readout	Matches SIM tray & box serial number	Verify eSIM EID hasn't been swapped without consent

In-Depth ZerosUniverse Tutorial

7 Best Android Keylogger Spy Apps for 2026

Read our complete step-by-step editorial guide, architecture breakdown, and defensive best practices on ZerosUniverse.

Read Full Guide

How to Use Android Secret USSD Codes & Spyware Risk Scanner

Select Your Android Brand

Filter the USSD table by Universal GSM, Samsung, Xiaomi/Poco, or Google Pixel.

Dial Forwarding Audit Codes

Enter *#21# and *#62# in your phone dialer to inspect active forwarding, and dial ##002# to clear all diversions.

Complete the 8-Symptom Spyware Audit

Toggle any suspicious indicators you observe on your device (e.g., unknown Accessibility services or Play Protect disabled).

Follow the Generated Remediation Plan

Review your calculated threat score and copy the step-by-step removal instructions.

Key Capabilities & Technical Architecture

Call & SMS Redirection USSD Auditor

Instant reference for *#21#, *#62#, *#67#, and the universal ##002# erasure code to cancel unauthorized call forwarding.

Vendor-Specific Diagnostic Code Filter

Filter hidden hardware test menus for Samsung One UI (*#0*#), Xiaomi HyperOS (*#*#6484#*#*), Pixel, and OnePlus.

8-Point Stalkerware & Permission Risk Scorer

Interactive checklist auditing Accessibility Services, Device Admin apps, Play Protect status, and idle battery/data drain.

Step-by-Step Eradication Playbook

Generates a tailored remediation checklist based on the symptoms you select.

Practical Use Cases

Checking for Unauthorized Call/SMS Forwarding

Verify in 10 seconds whether your voice calls or SMS messages are being silently diverted to another number.

Auditing a Phone for Commercial Stalkerware

Walk through Android's hidden Accessibility, Notification Listener, and Device Admin menus systematically.

Frequently Asked Questions (FAQs)

Can dialing *#21# detect spyware apps on Android?+

*#21# checks GSM carrier-level unconditional call and SMS forwarding—not internet-based spyware apps. Modern stalkerware uploads data over Wi-Fi/4G/5G using Android Accessibility Services, which must be audited in Settings -> Accessibility.

What does dialing ##002# do on Android and iPhone?+

##002# is a universal GSM network command that immediately disables and erases all conditional and unconditional call forwarding rules configured on your SIM line.

Where do hidden spy apps hide on Android?+

Spyware apps often disguise themselves under generic system-sounding names (like 'System Service' or 'Wi-Fi Updater') with blank icons, and abuse Settings -> Accessibility -> Installed Apps and Notification Access.

How do I safely remove a suspected stalkerware app?+

First boot Android into Safe Mode (press and hold Power, then long-press Restart), revoke any suspicious Device Admin privileges, uninstall the unrecognized package in Settings -> Apps, and enable Google Play Protect.

Why does *#*#4636#*#* not work on some Samsung phones?+

Samsung disables the stock AOSP *#*#4636#*#* testing menu on many One UI builds; use Samsung's hardware diagnostic code *#0*# or *#0011# instead.