Apple Introduces Impersonation Risk Detection to Combat Social Engineering Scams

Apple has rolled out a new privacy-focused security tool with iOS 27 and iPadOS 27 designed to shield users from social engineering scams. Known as Impersonation Risk Detection, the feature operates entirely on the device, analyzing user behavior in real-time to identify manipulative tactics without ever exposing personal photos, messages, or other private data to Apple.

Social engineering attacks differ from traditional breaches because they do not attempt to bypass technical defenses like two-factor authentication. Instead, scammers create a false sense of urgency to trick users into willingly handing over access or approving fraudulent transactions. Whether it is a caller posing as a bank representative or a deceptive text message, these scams rely on psychological manipulation rather than hacking through passwords.

The system monitors context, timing, interaction patterns, and basic sensor data when a user performs sensitive actions, such as changing account security settings or processing payments. If an app supporting the feature requests an assessment, the system returns one of three risk labels: “Unknown,” indicating no suspicious activity was detected; “Medium,” suggesting some warning signs; or “High,” signaling major indicators of a scam.

While the tool identifies potential threats, the ultimate response is determined by the app developer. Depending on the risk level assigned, an application may require additional identity verification, impose a waiting period, or display a security warning. Apple has noted that the feature is opt-in and complements existing online safety measures.

To enable the feature, users can navigate to Settings, select Privacy & Security, and toggle on “Share with App Developers” under the Impersonation Risk Detection menu. This section also allows users to review which apps have requested assessments and adjust permissions accordingly. Apple advises that if anyone contacting the user insists they disable this protection, it should be treated as a significant red flag. For security reasons, disabling the feature may take up to 24 hours to fully take effect.

Currently, the specific list of compatible apps has not been published by Apple, though the company expects broader adoption over time. This update represents a continuation of Apple’s emphasis on privacy-first security, addressing the human element of cybersecurity that traditional browser settings and password managers cannot fully mitigate.