Apple ships Impersonation Risk Detection in iOS 27
Apple's new on-device feature flags social engineering scams in real time and shares only a risk label with apps. It is opt-in.
Apple has released Impersonation Risk Detection as a new security feature in iOS 27 and iPadOS 27. The tool analyzes device behavior in real time to flag active social engineering scams, according to Engadget.
The processing runs entirely on-device. Apps that request a risk assessment receive only a risk label, not the underlying data behind it.
The system assigns one of three levels: Unknown, Medium or High. How an app responds to a given level is left to the app developer.
The feature is opt-in. Users enable it through Settings > Privacy & Security > Impersonation Risk Detection > Share with App Developers. Turning it off can take up to 24 hours to take effect.
Apple has not published a list of apps that support the feature, so users have no official way to check which apps will act on the risk labels.
Quick answers
How do I turn on Impersonation Risk Detection?
Go to Settings > Privacy & Security > Impersonation Risk Detection > Share with App Developers. The feature is opt-in.
What risk levels does the feature assign?
It assigns one of three levels: Unknown, Medium or High.
Does turning the feature off happen immediately?
No. Toggling it off can take up to 24 hours to take effect.