Can your iPhone warn your bank that a payment looks like a scam? In iOS 27 it can, through a setting called Impersonation Risk Detection. The catch is that you have to switch it on yourself. According to 9to5Mac, it is off by default.
What Impersonation Risk Detection does in iOS 27
The feature lets supported apps, such as banking and payment apps, ask Apple for a scam-risk level. They ask at sensitive moments, like when you’re about to make a payment or change account security details. The idea is to flag trouble while money or account access is still on the line.
The app gets back one of three levels: Unknown, Medium or High. Unknown means no evidence of a scam was detected. Apple says that doesn’t mean the action was confirmed safe.
What happens next is up to the app. It might ask you to verify your identity, add a delay or show a warning. Apple says it doesn’t decide or control that response.
Apple says the check runs on your iPhone and looks at how and when you interact, plus basic sensor data. Apple also says it never receives the data behind the risk level. Apple says it doesn’t analyze the content of your Photos, Messages or Mail either.
The setting arrived with iOS 27 and also works on iPadOS 27. It only does anything inside apps that support it.
How to turn on Impersonation Risk Detection
- Update your iPhone or iPad to iOS 27 or iPadOS 27.
- Open Settings and tap Privacy & Security.
- Scroll down and tap Impersonation Risk Detection.
- Turn on Share with App Developers.
- Sign in to the App Store with your Apple Account if you’re asked to.
Once it is on, there is nothing else to configure. Supported apps can start requesting assessments when you reach a sensitive step.
How to check which apps use it, or turn it off
The same settings screen doubles as an activity log. Here is how to review it:
- Go to Settings > Privacy & Security > Impersonation Risk Detection.
- Check Recent Activity to see which apps have requested an assessment.
- Look under Reasons for Access to see why each app asked.
- Turn off access for any individual app you don’t want using it.
- Turn off Share with App Developers to switch the feature off completely.
Any change to the setting can take up to 24 hours to apply. Apple says that delay is deliberate and meant to protect you. Its support page also carries a blunt warning:
If someone directs you to turn this feature off, you might be the victim of a scam.
The catches
The privacy cost isn’t zero. Apple does learn the type of action you attempted whenever an app requests an assessment. That is far less than message content, but it is still data about what you do in those apps.
The bigger gap is coverage, since the feature only works in apps that adopt it. As of October 20, Apple had not published a list of supported apps, per 9to5Mac. That leaves you with a toggle you can’t see working. It is also off by default, so it only protects people who know to look for it.
On Android, Google recently brought scam call protection to older phones through Play Services.
Source: Apple Support, 9to5Mac
