Apple’s iOS 27 scam detection feature can warn supported apps when a payment or account change may be part of an impersonation scam. It is called Impersonation Risk Detection, and it is off by default.
How iOS 27 scam detection works
Apple says the feature is designed for social-engineering scams in which someone pretends to be a bank, government agency or trusted contact. The user may still be the person making the payment or changing a password, but they are doing it under pressure or guidance from a scammer.
The system analyses device and Apple Account signals on-device, then gives a supported app a risk level rather than the underlying information. The app decides whether to show a warning, request more verification or add a delay. Apple lists three levels: Unknown means no suspicious evidence was detected, Medium means some signs were found, and High means significant signs were found. Unknown is not a guarantee that an action is safe.
How to turn on Impersonation Risk Detection
Open Settings, tap Privacy & Security, then choose Impersonation Risk Detection. Turn on Share with App Developers. Apple says you may need to sign in to the App Store with your Apple Account, and changes can take up to 24 hours to take effect.
The setting only helps in apps that support Apple’s framework. Apple has not published a complete list of supported apps, so enabling it does not mean every bank, wallet or delivery app will immediately display warnings. You can review which apps have requested a risk assessment and what prompted it in the same settings area.
Apple says the feature does not analyse the content of Photos, Messages or Mail, and apps receive only the risk level. That makes it relevant to the sort of fake bank and delivery calls UAE users regularly encounter, although the warning still depends on an app choosing to use the system.
For more context, iOS 27 arrives on 14 September with the UAE catch and iOS 27’s parental controls put more limits on children’s devices. Apple’s full explanation of Impersonation Risk Detection covers the privacy controls, while 9to5Mac’s walkthrough shows the feature in use.
Is Impersonation Risk Detection enabled by default?
No. Apple says users must enable Share with App Developers under Settings > Privacy & Security > Impersonation Risk Detection.
What do the iOS 27 scam-risk levels mean?
Unknown means no suspicious evidence was detected, Medium means some signs were detected, and High means significant signs were detected. Unknown is not a guarantee that an action is safe.
Does Apple send the underlying scam-detection data to apps?
No. Apple says the analysis happens on-device and supported apps receive only the resulting risk level, not the underlying information.
