Scammers have become very good at getting us to do the dirty work for them.
asserted
us → become → them
Someone may pose as your bank, claim your account was hacked or tell you to move money before something terrible happens.
uncertain
something → pose → money
The call or message might sound convincing enough that you willingly follow the instructions.
uncertain
you → sound → instructions
That's one reason a new iOS 27 setting caught my attention.
asserted
setting → catch → attention
Apple calls it Impersonation Risk Detection, and it can help supported apps recognize signs that you may be acting under the influence of a scammer.
uncertain
you → call → scammer
If you use Android, keep reading.
asserted
you → use → Android
Google Pixel and Samsung Galaxy phones have their own built-in scam protections, and some of them go after the problem from a different direction.
asserted
some → have → direction
I would check these settings no matter which of these phones is in your pocket.
asserted
which → check → pocket
Kurt "CyberGuy" Knutsson shares practical ways to stay safer, smarter and more confident with technology.
asserted
Knutsson → share → technology
Each class is free, easy to follow and comes with a free printable checklist.
asserted
class → follow → checklist
See the classes and register at CyberGuyLive.com
What Impersonation Risk Detection does on iPhone
Apple introduced Impersonation Risk Detection with iOS 27.
asserted
Apple → see → iOS
The feature is designed to help with active social engineering scams, where someone pressures or guides you into doing something yourself.
asserted
someone → design → something
Traditional security can help block malware or stop an unauthorized login.
asserted
security → help → login
However, those defenses can have a harder time helping when you are the legitimate account holder and a scammer has convinced you to send money or change sensitive account information.
asserted
scammer → have → information
When you perform certain sensitive actions inside a supported third-party app, that app can ask Apple for a risk assessment.
asserted
app → perform → assessment
Apple says examples may include making a payment or changing critical security information such as a password.
uncertain
examples → say → password
The app then receives one of three risk levels:
asserted
app → receive → levels
- Unknown: No evidence of suspicious activity was detected.
asserted
evidence → detect → activity
Apple warns that this does not confirm the action is safe.
asserted
action → warn → ?
- Medium: Some signs of suspicious activity were detected.
asserted
signs → detect → activity
- High: Significant signs of suspicious activity were detected.
asserted
signs → detect → activity
From there, the app decides how to respond.
asserted
app → decide → ?
It might ask you to verify your identity, delay an action or display a warning before letting you continue.
uncertain
you → ask → warning
That could give you one more opportunity to stop when a scammer is rushing you through a payment or account change.
uncertain
scammer → give → change
How Apple's anti-scam feature decides something looks suspicious
Impersonation Risk Detection looks at signals related to how you are using your device.
asserted
you → decide → device
Apple says those signals can include interaction patterns, timing, context and basic sensor data.
asserted
signals → say → patterns
Apple's privacy documentation gives some additional examples.
asserted
documentation → give → examples
Your iPhone may consider whether you are sharing your screen as well as the approximate number of recent phone calls or emails you have received.
uncertain
you → consider → calls
It can combine that assessment with certain Apple Account information, including recent App Store downloads and purchases.
asserted
It → combine → downloads
The goal is to look for unusual behavior that could suggest someone is guiding or pressuring you.
uncertain
someone → look → you
This feature works only with third-party apps that support Apple's Impersonation Risk Detection system.
asserted
that → work → system
Turning it on does not give every app on your iPhone automatic scam detection.
asserted
Turning → turn → detection
What Apple can see when you use Impersonation Risk Detection
Apple says it never analyzes the content of your Photos, Messages or Mail for this feature.
asserted
it → see → feature
The underlying device information used to create the assessment also stays protected from both Apple and the requesting app.
asserted
information → underlie → Apple
There is still some information sharing you should understand before turning it on.
asserted
you → be → it
Your iPhone creates an on-device assessment and sends that assessment, rather than the underlying device data, to Apple.
asserted
iPhone → create → Apple
Apple can then combine it with certain Apple Account activity to generate the final risk signals.
asserted
Apple → combine → signals
Apple also learns the category of activity you were attempting, such as signing in or making a payment.
asserted
you → learn → payment
Apple says it does not learn which app requested the signals or the content of what you were doing inside the app.
asserted
you → say → app
The requesting app receives the resulting risk level.
asserted
app → request → level
…and 82 more, not listed.
The Aporia
