GoKawiiliOS 27 introduces a new security feature called ‘Impersonation Risk Detection’ that helps protect you against scams, but it’s off by default. Here’s what the feature does, and how to enable it.
Impersonation Risk Detection in iOS 27 can detect suspicious activity in real time to prevent scams
Every day around the world, people get tricked into sharing sensitive information like bank details or other financial info with bad actors.
This commonly happens via text messages, emails, or phone calls to iPhone or Android devices. And while iOS has built-in tools like call and message screening, those tools can’t prevent a scam if you choose to take action on it.
But iOS 27 introduces a new level of scam-prevention with a security feature called ‘Impersonation Risk Detection.’
Here’s what it does, per Apple’s website:
Impersonation Risk Detection helps protect against active social engineering scams. In these scams, an attacker might pose as a bank, government agency, or someone you trust to pressure or guide you into making a payment or changing your account details. Traditional security measures like two-factor authentication can’t always detect this kind of scam. That’s because you’re taking the action, even though you’ve been tricked or pressured. Impersonation Risk Detection analyzes information about your device and Apple Account to help detect signs of an active scam. Based on this analysis, it returns a risk level to the app. The app receives only the risk level, not the underlying information used to generate it. The app decides what to do next. For example, it might ask you to verify your identity, add a delay, or show a warning.
You can turn Impersonation Risk Detection on in iOS 27 by going to Settings ⇾ Privacy & Security ⇾ Impersonation Risk Detection then toggling on ‘Share with App Developers.’
Impersonation Risk Detection is only available in supported apps, and Apple hasn’t published a list of those apps at the moment. But once enabled, it provides the app with a “risk level” while omitting the underlying information driving it. Risk levels include:
Unknown: No evidence of suspicious activity was detected
... continue reading