Apple introduces scam detection feature in iOS 27

Apple has introduced a new security feature called ‘Impersonation Risk Detection’ in iOS 27 and iPadOS 27. This tool is specifically designed to combat social engineering scams, where users are manipulated into performing sensitive actions like making high-value payments, changing passwords, or sharing account data.

When a user attempts a sensitive action within a participating app, the system analyzes interaction patterns, timing, context, and basic sensor information to assess risk. The feature provides developers with one of three risk levels: ‘Unknown’, ‘Medium’, or ‘High’. Based on these classifications, developers can choose to implement safeguards such as requesting additional identity verification, displaying warnings, or delaying the transaction.

To protect user privacy, Apple states that the analysis is performed on-device and that the company does not receive the underlying behavioral data or private content from apps like Mail, Messages, or Photos. Developers only receive the resulting risk classification rather than the raw data used to generate it. The feature is disabled by default and requires manual activation by the user.