The search for a free app to read messages from another cell phone It's one of the most exploited scams on the internet in Portuguese. The reason is simple: those who search for it are willing to install anything, ignore any security warnings, and, in many cases, enter a password where they shouldn't. It's a perfect audience for fraudsters.
This article doesn't include a list of apps because the honest answer to the question is that... It doesn't exist. A free app that reads messages from another cell phone. What exists is an ecosystem built on this promise. It's worth understanding how it works—including how to avoid falling for it.
First of all: this is a crime, even if it were free.
Accessing someone else's messages without their permission is... computer device intrusion, Article 154-A of the Penal Code, punishable by imprisonment from 1 to 4 years and a fine. The confidentiality of communications is guaranteed by Article 5, item XII, of the Constitution, and can only be broken by court order.
Curiosity is not a legal basis. Suspicion is not a legal basis. Being married to the person is not a legal basis. This point needs to be clear before any technical discussion, because many people come to this search thinking there is an exception for their case. There isn't.
The four types of scams that thrive on this pursuit.
1. O site que pede o número e roda uma animação
You type in the target phone number, a progress bar with technical terms appears, and at the end the site says the messages have been recovered. To "unlock the result," it asks you to complete a registration, install other apps, or share the link with ten contacts on WhatsApp. There is no data on the other side—the animation is a theatrical performance, and the product is you distributing the scam.
2. O clone de página de login
It promises access to conversations after you “confirm your account.” The screen is a visual copy of the WhatsApp Web, Facebook, or Google login page. What you provide there is your own password. Many WhatsApp account hijackings begin exactly like this—and those seeking to spy end up with their account stolen and their contacts receiving requests for money in their name.
3. O APK com malware
The file, downloaded from outside the official app store, requests accessibility and device administrator permissions. Once granted, the program reads everything that appears on the screen—including bank passwords and verification codes. A large portion of banking trojans circulating in Brazil are distributed this way, disguised as spyware or fraudulent applications. The compromised device is yours.
4. O “grátis” que é teste de três dias
The version advertised as free is a trial that requires a credit card to register. Billing starts automatically, is recurring, and cancellation is extremely difficult on the site. The product exists here—what doesn't exist is the "free" aspect.
Why the accessibility request is the ultimate warning sign
It's worth keeping this rule in mind, because it applies to much more than just this topic. The permission to accessibility The Android app was created for screen readers and features to support people with disabilities. It gives the app the power to read the content of any screen and simulate touches.
A flashlight app, a wallpaper app, a photo editing app, or a "message viewer" app has absolutely no reason to request accessibility. When such a request appears, the correct response is always the same: deny it and uninstall.
But what happens when the need is legitimate?
There is a legitimate reason for this search: a parent concerned about their minor child. For them, there is an official tool that is truly free and transparent.
O Google Family Link It allows you to set screen time, approve app installations, apply content filters, and view the device's location. On the iPhone, the Usage Time It does the equivalent without installing anything. Neither of them reads WhatsApp conversations — and it is precisely this limitation that keeps them within the law and within official app stores.
Google Family Link
AndroidIn both cases, supervision is overt: it appears on the child's device. Besides being what the law allows, it's what works best. Hidden monitoring lasts until it's discovered, and it always is.
If you've already installed something
- Uninstall the app and revoke accessibility and device administrator permissions.
- Change the passwords for your main accounts starting from other device, starting with email.
- Enable two-step verification on WhatsApp, email, and social media.
- If you entered your card details, ask your bank to block the account and dispute the charges.
- Run a full scan with a known antivirus program.
And if the question that brought you here was about a relationship: that's a question no app can answer. Searching for a technical answer is usually expensive and doesn't deliver what you were looking for.
SEE MORE:
- Safe apps for chatting with people nearby.
- App that takes a photo of who entered the wrong password on your phone.
- Vehicle history lookup by license plate.
Why is the message not being transmitted in a readable format?
The technical explanation settles the matter better than any moral warning. In the main messaging services, the message is scrambled within the sender's device, using a key that exists only there and on the destination device. The company's server receives an unintelligible packet, transports it, and delivers it. Not even the service operator can open the contents.
The practical consequence is straightforward: there is no such thing as interception from the outside. No app, website, or service can type in a phone number and return conversations, because the data that passes through the network is not in a readable format. Anyone who promises this is either lying to sell subscriptions or needs someone with physical access to the device.
The only real ways to access the device involve the person's phone or credentials, and all three are crimes when done without consent: linking an extra device to the account, accessing cloud backups with the victim's password, or installing a program that records the screen and keyboard. All require the phone to be in hand or the password to be used, and all leave a trace.
How to audit your own account in five minutes
If your concern is the opposite, that is, knowing if someone has already done this to you, there is a quick and free procedure. It works for any messenger that offers computer use, because that's exactly where the risk of a forgotten session lies.
- Open the messaging app settings and go to the list of connected or linked devices.
- Disconnect everything you don't recognize, and when in doubt, disconnect them all at once.
- Activate two-step verification, which creates a unique code required when registering the number on another device.
- Please check if the email address registered for recovery is still yours.
- On your mobile phone, review the accessibility menu and disable any unknown apps listed there.
- Also check the list of apps with device administrator privileges, which should be empty.
- Change the password for the cloud account used for backups and enable two-factor authentication for that account as well.
Two observations conclude the audit. The first is that the six-digit code sent by message should never be passed on to anyone, not even to someone presenting themselves as support. The second is that the backup stored in the cloud is the weakest link in the chain, because it is protected by the account password, and not by the encryption of the conversation.
What this type of app promises but doesn't deliver.
Let's state it bluntly. There is no app that reads conversations from another number, there is no panel that shows who visited your profile, there is no way to recover deleted messages on someone else's device, and there is no free version that does any of these things. What exists is a market that sells expectations and charges a subscription until the customer gives up.
There's another cruel detail in this trade: those who seek this type of program hand over, in the process, their own phone number, their own contacts, and sometimes access to their own device. It's quite common for the person who wanted to monitor others to end up with their data exposed and with a recurring charge they don't know how to cancel.
The most frequent mistakes people make when searching for access information are authorizing accessibility permissions, installing files downloaded outside of the store, entering their own credentials on a page that mimics the login screen, and paying with cryptocurrency or bank slips to a seller who then disappears.
Questions that always come up
E os aplicativos que dizem clonar o mensageiro?
What they call cloning is, at most, the official method of using the same account on another device, which requires scanning a code with the unlocked phone in hand. Without this physical access, nothing happens. The rest is just a facade to install something else on your device.
Ler as mensagens do meu companheiro é crime mesmo sendo casado?
Yes. Article 154-A of the Penal Code deals with the invasion of another person's computer device and makes no exception for affective relationships. Furthermore, evidence obtained in this way is illegal and tends to be discarded in court, with the possibility of being used against the person who collected it.
Existe alguma forma legítima de acessar mensagens de outra pessoa?
With her explicit consent, or by court order in cases provided for by law. Otherwise, no. In situations of serious suspicion, the course of action is to seek legal advice, not an app.
Instalei um desses programas. Como desfaço?
Put your device in airplane mode, enter safe mode, revoke accessibility and administrator rights, uninstall the app, and change the passwords on another device. If you paid by card, dispute the charge and cancel the subscription through the store.
O que o próprio sistema já oferece de proteção aqui?
Quite a lot: two-step verification on accounts, new login alerts, a list of linked devices, biometric screen lock, hiding notification content on the lock screen, and Play Protect warning about harmful apps. All of this comes standard and is free.
