Apple's iOS 27 adds Impersonation Risk Detection, an on-device privacy setting that checks for active social engineering scams during phone calls without sharing personal data.
01Summary
- 01Impersonation Risk Detection is off by default and must be enabled in Settings under Privacy & Security.
- 02The feature analyses on-device signals like timing and interaction patterns to assign a risk level to payment or account changes.
- 03Supported apps receive only the risk level, not the underlying data, and can warn, delay, or ask for identity verification.
- 04It can take up to 24 hours for the setting to activate or deactivate, which acts as a barrier against scammers.
- 05The feature does not catch all scams, and users are advised to stay vigilant.
02Why it matters
This matters because it protects against social engineering scams where fraudsters trick you into authorising payments yourself, adding a layer of protection that two-factor authentication cannot provide.
Answers are generated by AI from the story summary; they are not investment, health or legal advice.





