AI-generated editorial illustration; not a documentary photograph.
iOS 27 and iPadOS 27 include Impersonation Risk Detection, an opt-in feature that assesses whether sensitive activity may be connected to a social-engineering scam. Supported apps can request a risk level before actions such as password resets, disabling two-factor authentication or large payments, then decide whether to warn the user, introduce delays or require identity verification.
Risk Signals, Not Account Data
Apple says the assessment can consider information about the device and Apple Account, but the requesting app receives only an Unknown, Medium or High risk level. Unknown means the system found no suspicious activity, not that it confirmed an action was safe. Medium and High indicate increasing signs of suspicious behavior.
According to Apple, the analysis runs on the device and does not inspect email, photo or message contents. Apple says apps do not receive the device or account information used to calculate the result, while Apple receives only the type of action being attempted in the requesting app.
Users Must Enable It
The feature is disabled by default. After installing iOS 27 or iPadOS 27, users can activate it under Settings, Privacy & Security, Impersonation Risk Detection by enabling sharing with app developers. The same page lists recent requests for risk assessments and the reasons apps supplied for making them.
Access can be disabled globally or for individual apps, but Apple may delay that change for up to 24 hours. The delay is intended to make it harder for a scammer to pressure someone into immediately removing the protection.
Protection Depends on App Support
Impersonation Risk Detection does not independently block transactions or account changes. Each developer must integrate the feature and determine how its app responds to the three risk levels. Apps with existing anti-fraud systems may choose not to support it, limiting how broadly the protection works.
Because participation is optional for both users and developers, the feature's practical reach depends on awareness and adoption. It also remains a warning signal rather than a guarantee: an Unknown result does not establish that an activity is legitimate.
Source: This New iOS 27 Feature May Save You From Getting Scammed

Leave a Reply