iOS 27 lets apps ask your iPhone if you're being scammed

iOS 27 introduces Impersonation Risk Detection: when a user sends a payment or changes a password, a supported app can request a risk assessment from the iPhone. The system analyzes interaction patterns, timing, context and sensor data, returning only Unknown, Medium or High to the app.

• The app receives a single word: Unknown, Medium or High
• iOS does not block transfers or show system alerts — the app decides what to do
• The feature does not scan content in Photos, Messages or Mail
• It is off by default, and turning it off takes effect after a 24-hour delay