Apple's iOS 27 adds Impersonation Risk Detection against scams

Apple introduced Impersonation Risk Detection in iOS 27 and iPadOS 27, which analyzes device behavior in real time to flag social engineering scams. Processing runs entirely on-device, and apps receive only a risk label without personal data. The feature is opt-in.

• Runs fully on-device; Apple never sees photos, texts or personal content
• Apps receive a risk level: Unknown, Medium or High
• Opt-in feature; turning it off can take up to 24 hours
• Works only with apps built to request a risk assessment