uk Technology & digital loss

What to do if…
your device keeps asking for suspicious new system permissions after an update

Produced and maintained by PanicStation.org Published: 25 May 2026 Last reviewed: 17 July 2026 Editorial policy UK guide

Short answer

Pause and deny any permission request you do not clearly recognise or need right now. Then check your device’s privacy settings and remove sensitive access from any app that seems linked to the prompts.

Do not do these things

Don’t keep tapping Allow just to make the prompts stop.
Don’t install a random “permission manager”, “cleaner”, or “security” app from a pop-up or advert.
Don’t enter bank, email, work, or password manager details on the device until you have reviewed the prompts.
Don’t click links in pop-ups or messages claiming your device is infected or needs urgent verification.
Don’t factory reset in a panic before you have tried safer containment steps and checked what you need to keep.

What to do now

Pause risky activity.
Stop logging in, paying, entering passwords, or approving new prompts for a few minutes. Keep the device with you, but do not let the pressure of the pop-up make the decision.
Deny or close the prompt unless it is clearly expected.
If the prompt names an app you do not recognise, or asks for camera, microphone, location, contacts, photos, or files without a clear reason, choose Don’t Allow, Deny, or close the app. If the same prompt keeps returning, treat that as something to check, not something to accept.
Find which app is asking.
- iPhone or iPad: go to Settings → Privacy & Security and review access for Microphone, Camera, Location Services, Contacts, Photos, Bluetooth, and Local Network. You can also check App Privacy Report if it is available; if it was not already turned on, it may only start showing information after you enable it.
- Android: menu names vary, but usually go to Settings → Security & privacy → Privacy → Permission manager. Check sensitive permission types such as camera, microphone, location, contacts, photos, and files.
Remove the highest-risk permissions first.
For any app you do not recognise, do not use, or do not fully trust, change sensitive permissions to Don’t Allow, Never, or Ask every time. For location, choose While using the app rather than always-on access when that is enough.
Work out the likely trigger.
Notice whether the prompts appear when you open one app, unlock the device, connect to Wi-Fi, open a browser page, or tap a notification. If one app seems connected, force close it and turn off its notifications while you review it.
Remove or update suspicious apps safely.
Review apps that were recently installed or recently updated. Uninstall anything you do not recognise, no longer need, or that has a confusing lookalike name or icon. Update apps only through the official app store for your device.
On Android, check Play Protect.
Open the Google Play Store, tap your profile icon, and check Play Protect. Keep Play Protect on unless you have a clear technical reason not to.
If you suspect account compromise, protect your main email from another device.
Use a trusted phone or computer to change the password for your primary email account. Turn on two-step verification if you can do it calmly. Your email is the priority because it is often used to reset passwords for other accounts.
If money was taken or an account was accessed, report it promptly.
If you live in England, Wales, or Northern Ireland, use Report Fraud to report cyber crime or fraud. If you live in Scotland, report cybercrime to Police Scotland online, by phone, or in person. Use 999 only if there is an immediate emergency.
If this started with a suspicious message, report the message without engaging with it.
Forward suspicious emails to [email protected]. Forward suspicious texts to 7726 if your mobile provider supports it; most UK providers do. If 7726 does not work, check your provider’s own reporting route.

What can wait

You do not need to decide today whether this was definitely malware or just a normal update.
You do not need to factory reset immediately if you can still control permissions, remove suspicious apps, and use another device for sensitive accounts.
You do not need to contact every service you use at once. Start with your primary email, banking, work, and any account showing unusual activity.
You do not need to diagnose the exact technical cause before taking simple containment steps.

Important reassurance

A permission prompt can feel urgent because it interrupts what you were doing. Denying first, then reviewing access in settings, is a cautious and usually reversible way to regain control without rushing into bigger steps.

Scope note

These are first steps to stabilise the situation and prevent irreversible mistakes. If the prompts continue after you revoke permissions and remove suspicious apps, you may need device-specific help from the device maker, your mobile provider, workplace IT, or a trusted repair service.

Important note

This is general information, not legal, financial, technical, or other professional advice. If you have strong reason to think your device or accounts were compromised, prioritise protecting your primary email, banking, work, and important accounts, and use official reporting and support routes.

Additional Resources

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us