Apple Introduces On-Device Impersonation Risk Detection in iOS 27
The opt-in tool alerts supported apps when behavioral cues suggest a user is undergoing an active social engineering scam.
Apple has introduced a new security capability called Impersonation Risk Detection in iOS 27 and iPadOS 27, designed to flag real-time social engineering scams, according to a report from Engadget (https://www.engadget.com/2271157/apple-iphone-ipad-impersonator-risk-detection-new-security-feature/).
Traditional security measures such as passwords and two-factor authentication protect accounts from direct unauthorized intrusions, but they offer little defense when an attacker convinces a user to approve an action voluntarily. Impersonation Risk Detection targets this gap by analyzing interaction patterns, timing, context, and basic sensor metrics when a user initiates high-risk operations, such as sending a payment or altering security credentials.
The assessment executes entirely on-device, ensuring that Apple does not access photos, text messages, or other personal data. When a participating application requests an evaluation, the operating system returns a high-level risk determination without exposing any underlying analytical data. Reported risk tiers include 'Unknown,' indicating no abnormal signals were detected, and 'Medium,' signaling suspicious behavioral patterns.
App developers determine how their software responds to these risk scores. Depending on the evaluation returned by the operating system, an app can display a security warning, prompt for secondary identity verification, or enforce a short delay before completing the transaction.
The capability is opt-in and requires users to enable the 'Share with App Developers' toggle in device settings. Users can review which apps have requested risk assessments and manage their permissions from the same menu. To prevent attackers from coercing victims into immediately disabling the protection during an active call or scam, switching the feature off takes up to 24 hours to take effect.
The feature requires developer adoption, and Apple has not published a directory of supported third-party applications.
Sources
Written by
The Company Wire
Inside the companies building what’s next. Reporting on startups, technology, funding and the people shaping them.
