iOS 27 Impersonation Risk Detection Explained: How Apple’s New Feature Helps Spot Scams

Apple’s iOS 27 introduces Impersonation Risk Detection, a new security feature designed to identify potential fraud risks and warn users before sensitive actions.

 | 
Apple iOS 27 Impersonation Risk Detection feature designed to warn iPhone users about potential scams

September 17, 2026: In India, Online and phone-based scams have become increasingly complicated, with fraudsters often pretending to be bank officials, government representatives, delivery agents, or even people known to the victim. 

Using phone calls and text messages, scammers try to create a sense of urgency and convince users to send money, share sensitive information, or change important account settings.

To help users stay protected from these social engineering scams, Apple has introduced a new security feature in iOS 27 called Impersonation Risk Detection. The feature is designed to identify potential signs of an active fraud attempt and warn users at critical moments, such as before sending money or making changes to important account security information. 

Throughout this article, we will share complete details about iOS 27 and its new security feature, as many people may not be fully aware of how it works.

How will Impersonation Risk Detection work?

According to Apple, this feature is designed to detect situations where a fraudster is trying to force a user to take certain actions by impersonating a bank, government agency, or someone they know.

The system will analyse some information about the iPhone or iPad and the user's Apple account to look for signs of suspicious activity.

When a supported app requests a risk assessment during a task that could be particularly important or dangerous for the user, the system will create a risk level. The app can then determine the next steps based on that risk level.

Three types of risk levels

According to Apple, Impersonation Risk Detection can show risks at three levels:

Anonymous: No evidence of suspicious activity has been detected. However, this does not mean that the task is completely safe.

Medium: Some signs of suspicious activity have been found.

High: Significant signs of suspicious activity have been detected.

That is, if the system sees a high risk during a transaction or important account change, the relevant app can show additional warnings or other security measures to the user.

Personal information will not be passed to the app

One of the important aspects of this feature is that Apple said that the information used to determine the risk will not be given directly to the app. The app will only get the final risk level. That is, the detailed information on which the system made that assessment will not be passed to the app. This risk assessment can be used for important tasks like sending money. In addition, the feature can be activated when changing important security information like account passwords.

How to enable the feature on iPhone

To enable Impersonation Risk Detection in iOS 27:

1. Open the Settings app.

2. Go to the Privacy & Security option.

3. Scroll down and select Impersonation Risk Detection.

4. Turn on the Share with App Developers option.

5. Sign in to the App Store with your Apple account if necessary.

Users can also separately control which apps will benefit from risk assessment through this feature if they want.

Will not stop fraud completely

Apple has made it clear that this feature does not guarantee that it will detect all types of fraud. Impersonation Risk Detection will only work with supported apps. In addition, even if the system shows a task as safe, there is no guarantee that it is definitely safe.

Therefore, even with the new security measures, it is important for users to be careful. Especially if someone asks you to send money or change your password by phone or message, pretending to be a bank, government agency, or acquaintance, it is safe to advise you not to take any important steps without verifying your identity.

This new feature in iOS 27 aims to alert users by identifying signs of risk during fraud, rather than taking action after it has occurred.