Unauthorized activities could be triggered even if a phone is locked, its screen is turned off, or a person is in the middle of a call.