Xiaomi and Redmi smartphone owners often face unexplained charges from their mobile account, which can be described as “SMS Positioning” or third-party content providers in detail, a phenomenon that is puzzling because the user did not subscribe to paid services or enter card details.
The problem lies in hidden subscriptions or activated operator services, which can be triggered automatically when you install certain applications or click on advertising links. SMS positioning in the context of charging is often just a screen for access to paid content that is activated without the explicit consent of the owner of the device.
This is a must for every MIUI user, as timely detection of a money leak not only helps to recover money but also protect personal data. In this article, we will discuss in detail the nature of such write-offs and provide a step-by-step algorithm for their complete elimination.
The nature of hidden subscriptions to Android
The phenomenon of sudden appearance of paid services on the phone is not accidental. Most often activation occurs in the background, when the user installs the application from an unverified source or agrees to the terms of use without reading them. Malware or aggressive advertising can initiate sending SMS to short numbers, which the operator perceives as consent to the connection of the service.
Communications providers provide the ability to confirm actions via SMS, and many services use this. If a device does not have a reliable antivirus or blocker installed, the script can send a command to activate a subscription without the knowledge of the smartphone owner, especially on devices with root rights or an unlocked bootloader, where system restrictions are relaxed.
It is important to understand the difference between Xiaomi system services and third-party subscriptions. Xiaomi itself does not directly charge for “positioning” through SMS messages, usually we are talking about the services of the operators of the “big three” or fourth market player, which masquerade as system notifications.
⚠️ Note: If you notice a debit immediately after installing a new game or utility from an unknown source, immediately delete this application and check the list of active subscriptions with the operator.
Analysis of the situation shows that the vulnerability often lies in the permission of applications to send SMS. Modern versions of Android strictly control this access, but older versions of MIUI or modified firmware may have loopholes.
Diagnosis: how to identify the source of write-offs
Before we move to active blocking actions, we need to identify the source of the problem. Blindly shutting down all services can disrupt important functions such as two-factor authentication or bank notifications. The first step should always be to detail costs.
Order a detailed expense report in your mobile operator’s personal account or through USSD-In the report, look for short number codes or service names that you don't know, often with names like "SuperGPS," "LocatMe," or acronyms for content providers.
It's also worth checking the internal settings of the smartphone. There's a built-in Security tool in MIUI that can track suspicious activity, it analyzes the behavior of applications and can report if a program tries to send a text message in the background.
- 📱 Check your text history: go to the standard message app and see outgoing ones, especially the "Sent" folder.
- 📉 Analyze the installed applications: sort the list of programs by installation date. If suspicious write-offs began after installing a particular software, the problem is likely in it.
- 🔍 Use Google Play Protection: Run a device scan through Google’s built-in service, which can identify known money-stealing threats.
Pay special attention to applications with device administrator rights. Attackers often give malicious code rights so that it can not be simply removed through the standard menu.
Disconnection through the settings of the operator
The most effective way to stop write-offs is to block a service on the operator's side. Even if you delete an app from your phone, a subscription can remain active in the operator's database, continuing to generate invoices. Every major operator provides tools to manage content subscriptions.
There are special services for subscribers of different networks USSD-For example, using commands to disable all paid subscriptions ("Anti-Subscription") allows one action to block third-party services from accessing your account.
If automatic commands do not help, you need to contact support. Operators are obliged to provide information about the connected services and have the right to disable them at the request of the subscriber. In the case of illegal debiting of funds, you can write a claim for a refund, citing the lack of your consent.
| Operator. | Subscription verification team | Shutdown command | Additional action |
|---|---|---|---|
| MTS | *111*915# | *152*2# | Appendix MTS Money |
| MegaFon | *105*10# | *105*1711# | Personal account on the website |
| Beeline | *102*2*8# | *102*1*8# | Beeline.Protection service |
| Tele2 | *153# | Through the operator | The "My Tele2" app |
After the instructions are completed, it is recommended to restart the device, which will allow you to update the network settings and make sure that the new charging rules are applied correctly. SIM-map.
Configure permissions and lock in MIUI
Xiaomi and Redmi smartphone owners are more fortunate than other brands thanks to the deeply integrated MIUI shell. it has powerful tools to control the access of applications to phone functions, including sending SMS.
First of all, you need to restrict application rights. Go to the security settings and find the permissions section. You can prevent all or specific applications from sending SMS. By default, this feature should be closed to all programs except the standard call menu.
You should also activate the built-in blocker. In the Security app, go to the blocker settings and enable message filtering from unknown numbers and keyword blocking, which will help cut off spam and subscription activation commands.
☑️ Security setting MIUI
Special attention should be paid to the application manager feature, which can hide or block the launch of suspicious system components that may masquerade as services of Google or Xiaomi, and be careful to disable system processes so as not to disrupt the operation of the phone.
⚠️ Note: Do not allow SMS to be sent to flashlights, calculators, games or photo editors.
If you use a second space or guest mode, check the settings there too. Malware can hide in isolated profiles while continuing to perform paid actions. Full control requires checking all user profiles on the device.
Use of third-party security solutions
While MIUI is powerful, it sometimes requires specialized software, and third-party antivirus and paid subscription blockers can offer more flexible settings and databases that are updated in real time, especially for new types of fraud.
Popular solutions like Kaspersky, Dr.Web, or ESET have both Anti-Visitor and Fraud Protection modules, and they can recognize attempts to migrate to phishing sites, which are often triggers for activating paid services, and installing such software creates an additional barrier.
There are also specialized paid subscription blocking applications that work at the network level, intercepting requests for short numbers and blocking them even if the virus application tries to send SMS, an example of which is the functionality of some carrier applications or third-party firewalls.
- 🛡️ Kaspersky Internet Security: Provides comprehensive protection, including web filter and real-time application verification.
- 🕵️ Dr.Web Security Space: Known for its heuristic analyzer that detects unknown threats trying to access SMS.
- 🚫 Ad Blockers: Apps like AdGuard can block access to ad domains, reducing the risk of accidentally switching to a subscription site.
One reliable antivirus is enough in conjunction with the built-in MIUI blocker. Regularly update the signature databases to ensure that protection remains relevant.
Is root rights worth protecting?
Prevention and safe use of the smartphone
The best protection is prevention, and following simple digital hygiene rules will avoid most of the problems with paid subscriptions, first of all, refuse to install apps from unknown sources. Google Play Store and GetApps (Xiaomi store) check the downloaded content.
Read rights requests carefully when installing new software. If a simple flashlight asks for access to contacts, geolocation, and SMS is a clear sign of fraud, cancel the installation, or look for an analogue with fewer permissions requested.
Update your operating system and applications regularly. Android and Xiaomi developers are constantly closing vulnerabilities through which scammers enter the system. Using an outdated version of software is an open door for attackers.
💡
Set limits on online purchases in the banking application or completely disable the ability to pay from your mobile account if you do not need this feature.
It is also recommended to periodically check the list of active services in the operator’s personal account, which takes a couple of minutes, but allows you to keep your finger on the pulse and respond quickly to any changes in the tariff plan.
💡
A comprehensive approach, including operator settings, MIUI access rights and the installation of a reliable antivirus, guarantees 100% protection from hidden SMS subscriptions.