Apple has added a new security feature to iOS 27 and iPadOS 27 designed to detect signs that a user may be caught in an active social engineering scam. Called Impersonation Risk Detection, the feature is designed for situations where traditional protections such as two-factor authentication and password managers cannot help because the user is being persuaded or pressured into taking an action themselves.
The feature is disabled by default and must be enabled by the user. Apple says it can take up to 24 hours to become fully active. The analysis is performed entirely on the device. Apple says it does not read private content from Photos, Messages or Mail, while apps do not receive the underlying sensor or behavioural data. Instead, developers receive a risk classification.
