Apple introduces impersonation scam detection in iOS 27

Apple has introduced a new security feature called Impersonation Risk Detection as part of its iOS 27 release. This tool is designed to protect users from social engineering scams where attackers pose as trusted entities, such as banks or government agencies, to pressure victims into making payments or altering account details.

The system analyzes interaction patterns, timing, context, and device sensor data to assign a risk level of Unknown, Medium, or High. This information is shared with supported apps, which can then decide whether to issue a warning, require identity verification, or implement a delay before completing a sensitive action. To enhance security against manipulation, any changes to these privacy settings may require a 24-hour waiting period before taking effect.

To use the feature, users must manually enable it via Settings > Privacy & Security > Impersonation Risk Detection. All data processing for this feature occurs locally on the device to maintain user privacy.