Apple's new iPhone and iPad security feature can protect you from scammers

Apple wants you to stop falling for scammers, and this feature adds more safeguards.

Apple has delivered a great new security feature with iOS 27 and iPadOS 27, though it's not one that made headlines. Called Impersonation Risk Detection, it analyzes device behavior in real-time to flag active social engineering scams — the kind that trick you into handing over access yourself, even when your passwords and two-factor codes are working as intended.

It runs entirely on-device, so Apple never sees your photos, texts or any other personal content. When a supported app requests a risk assessment, it receives a label with none of the underlying data behind that determination. This is an opt-in feature, making it a complementary tool to all the other steps you take to be safe online .

Security features like two-factor authentication are great, but Impersonation Risk Detection is built for a different kind of danger. Social engineering scams don't force their way through your defenses, but rather convince you to open the door yourself. From old-school callers posing as your bank to texts that look like a fraud alert, they all create a sense of urgency that tries to short-circuit your protections. When you're opening the door yourself, no two-factor code can flag the problem. But this feature (hopefully) can.

Impersonation Risk Detection works to detect the signs of a scam as it's happening. When you take a sensitive action, such as making a payment or changing account security details, a supporting app can request a real-time risk assessment. Your phone generates that assessment by analyzing interaction patterns, timing, context and basic sensor data, which all runs on-device. Based on this analysis, the system assigns one of three risk levels:

Unknown : The system didn't detect any suspicious activity (although this doesn't mean it's safe to go ahead).

Medium : The tool detected some signs of suspicious activity.

An attacker posing as a bank representative or government official can pressure people into approving shady transactions or sending their passwords, which can be even more convincing with AI . Apple's new tool fills a gap by catching suspicious behavior during the moments scammers rely on. However, the decision on what to do next belongs to the app developer. Depending on the risk level returned, the app might ask you to verify your identity, impose a short waiting period or display a warning.