Apple's iOS 27 adds Impersonation Risk Detection against scams

iOS 27 and iPadOS 27 introduce Impersonation Risk Detection, letting supported apps request a risk assessment when a user action may be part of a social engineering scam. Analysis runs on-device and apps receive only a risk level: unknown, medium or high.

• Feature is opt-in under Settings > Privacy & Security > Impersonation Risk Detection
• Assessment uses call, email, purchase and basic sensor patterns on device
• Apple does not analyze contents of Photos, Messages or Mail
• Access changes can take up to 24 hours to take effect