“Is my phone tapped?” covers three different problems
The question is one of the most common we are asked, and the first job is to work out which problem you actually have.
The line or the infrastructure. A physical tap on a landline pair, a compromised extension or conference bridge on an office PBX, VoIP traffic mirrored or misrouted to a third party, or a cellular interception device — an IMSI-catcher — operating in the environment around you. These sit on the path your call travels, not on your phone.
Spyware on the handset. Software on the phone itself that records calls, reads messages and switches on the microphone. This is the problem most people picture, and it is the one TSCM does not address. Finding malware on a phone is mobile forensics, a separate discipline, and we say so plainly.
The room. A microphone in the office, the car or the bedroom hears every call made there, both sides, on speaker or not, and everything said before and after. When calls leak and the handset is clean, the room is usually where the answer is.
Phone tapping detection, as Forensic TSCM delivers it, covers the first and the third.
Which signs are real?
Most of what circulates about tapped phones dates from analogue exchanges. Clicks, static and echo come from digital call quality, poor coverage and hand-offs between cells; a modern interception adds nothing you can hear. Battery drain and a warm handset have a dozen ordinary causes. A code such as *#21# only asks your operator whether call forwarding is switched on, which is worth checking but is not an all-clear.
The signs worth acting on are behavioural. Information discussed only on a call, or only in one room, reaches a counterparty, a competitor or an estranged spouse. Call forwarding or voicemail settings you did not change. An office phone system showing an extension, a trunk or a configuration change nobody authorised. A leak confined to one office points at that office; a leak confined to one desk line points at the line; a leak that follows you between phones and places points at the handset. Our article on the real signs of a tapped phone sets this out symptom by symptom.
What our phone tapping detection covers
The line. Telecommunications analysers examine landline pairs, PBX and VoIP infrastructure for taps, compromised extensions and unauthorised call routing. This is an inspection of the path, not the handset: junction boxes, patch panels, the PBX configuration, the conference bridge, the VoIP gateway and the cabling between them. The instruments are described on our technology and methodology page.
The environment. Cyber TSCM profiles the Wi-Fi, GSM and Bluetooth activity around a boardroom, an office or a residence and flags cellular anomalies consistent with IMSI-catcher or interception activity. We describe this as awareness rather than certainty: the aim is to establish whether the cellular environment around you behaves the way it should, and to converge that picture with what the physical sweep finds.
The room. The full four-stage sweep — survey, RF map, technical and physical inspection, report and mitigation — of the space where the calls are made. For an office that is a corporate bug sweep; for a home, a residential sweep; for a car, a vehicle sweep. If your calls leak and the phone is clean, this is the check that most often produces the finding.
What we do not check: the handset itself
We do not examine mobile phones for malware, and we do not claim to. That is mobile forensics: imaging the device, analysing the operating system and installed applications, and recovering indicators of compromise. If you suspect spyware on a handset, engage a mobile-forensics specialist.
In the meantime, basic hygiene costs nothing. Keep the operating system and apps updated, review installed applications and any configuration or device-management profiles, check which apps hold microphone, camera and accessibility permissions, change passwords from a device you trust and enable two-factor authentication. None of that replaces a forensic examination, and none of it addresses a tapped line or a bugged room.
Before you call us
Stop discussing the suspicion on the suspect line and in the suspect room. If either is compromised, announcing your concern tells the listener to remove the evidence. From a different phone, in a different place, write down what leaked, when it was said, where it was said and who could have known it. That record is what points the engagement at the line, the environment or the room. Do not confront anyone, change your routine visibly or remove anything you find until the check is complete.
Phone tapping detection across Ghana
We inspect office phone systems and sweep the rooms behind them for corporate, government and private clients in Accra, Tema, Kumasi and Takoradi, and across West Africa. Where the concern is part of a wider pattern — a competitor who anticipates your positions, a car that seems followed, a deal that leaks — our counter-espionage services overview sets out how the strands fit together. Every enquiry is handled in strict confidence; tell us from a phone and a place you do not suspect.