How do they transfer files to my phone

At this point I'd create a new Gmail account done on a PC.
And while you're at it create all new passwords for any other accounts.
I'd even go as far as going to your carrier and having them install a new sim card for the phone.

As well as following Dannydet's advice I would also stop handing your phone over to other people or leaving it where someone can access it. Turn off WiFi and Bluetooth if you aren't actively using them and password protect your phone.

XyloPoP said:

How can they transfer files to my phone though without any interaction with the phone.

Click to expand...

Well from what you've said about people "always wanting your phone for some odd reason" it's not clear that they are doing this without interaction. That's assuming you are correct about there being a group including people you know, as opposed to there being one person and your just being driven to paranoia by the repeated problems (which would be understandable).

But there are really just 3 ways:

1) they do have physical access. You've said yourself that you do hand your phone over to people, despite having reason to believe that something is going on.

2) they have access to your Google account. With that they could access your phone without physical interaction (though you should be able to see some signs of things being downloaded, though perhaps those could be removed afterwards).

3) they've managed to install some malware to the system partition, which means it will survive factory reset.

The first is easy: you don't let anyone else access your phone.

The second is straightforward enough: factory reset, change all of your passwords, secure your account (two-factor authentication). Or just remove your current account from your phone, factory reset, then start fresh with a new Google account. The order of these things is important: if you change your Google password and then reset you'll trigger a security protection which will lock you out of the phone for a couple of days. And if you use a compromised device to change passwords then you might be giving the intruder your new password as you set it (if there's a keylogger installed).

The third is much harder for someone to do, especially if your phone is up to date with security patches and you've not let anyone access it for long without being present. But if someone has done this the only way to remove it is to reflash your phone's firmware completely.

I'd try the first 2 first, since the third is more work unless you are technically inclined. But these are separate risks: protecting against one of them offers no protection against the others (e.g. if your Google account is compromised then that can be used to infect any phone you set the account up on, or if the phone was originally compromised by someone having access to it then they can do it again if you let them no matter how well you clear it).

Hi @XyloPoP!

Welcome to the Android Forums.

Who are they?

dontpanicbobby said:

Hi @XyloPoP!

Welcome to the Android Forums.

Who are they?

Click to expand...

You know... Them!