iOS 27 Adds Impersonation Risk Detection to Fight Scams

Apple introduced Impersonation Risk Detection in iOS 27, a feature that flags social engineering scams designed to bypass two-factor authentication. Analysis runs on-device and apps receive only a risk level: Unknown, Medium or High. It is enabled under Privacy & Security and works only in supported apps.

• Feature scores interaction patterns, timing and context into three risk levels
• On-device analysis keeps personal data from being sent to Apple
• Enabled via Settings, Privacy & Security, Impersonation Risk Detection
• Activation or deactivation can take up to 24 hours