The article highlights new anti-scam settings available on iPhones, Google Pixel, and Samsung Galaxy devices to protect users from social engineering scams. For iPhones running iOS 27, Apple introduced Impersonation Risk Detection, which assesses the risk level of sensitive actions like making payments or changing passwords within supported apps. This feature evaluates factors such as interaction patterns and recent communications to determine if a user might be under scammer influence, potentially alerting them before they proceed with risky activities.
Written locally by qwen2.5:14b on 2026-10-08,
using this article's own text rather than the other coverage of the
same event (that is the story summary below).
Scammers have become very good at getting us to do the dirty work for them.
asserted
us → become → them
Someone may pose as your bank, claim your account was hacked or tell you to move money before something terrible happens.
uncertain
something → pose → money
The call or message might sound convincing enough that you willingly follow the instructions.
uncertain
you → sound → instructions
That's one reason a new iOS 27 setting caught my attention.
asserted
setting → catch → attention
Apple calls it Impersonation Risk Detection, and it can help supported apps recognize signs that you may be acting under the influence of a scammer.
uncertain
you → call → scammer
If you use Android, keep reading.
asserted
you → use → Android
Google Pixel and Samsung Galaxy phones have their own built-in scam protections, and some of them go after the problem from a different direction.
asserted
some → have → direction
I would check these settings no matter which of these phones is in your pocket.
asserted
which → check → pocket
Kurt "CyberGuy" Knutsson shares practical ways to stay safer, smarter and more confident with technology.
asserted
Knutsson → share → technology
Each class is free, easy to follow and comes with a free printable checklist.
asserted
class → follow → checklist
See the classes and register at CyberGuyLive.com
What Impersonation Risk Detection does on iPhone
Apple introduced Impersonation Risk Detection with iOS 27.
asserted
Apple → see → iOS
The feature is designed to help with active social engineering scams, where someone pressures or guides you into doing something yourself.
asserted
someone → design → something
Traditional security can help block malware or stop an unauthorized login.
asserted
security → help → login
However, those defenses can have a harder time helping when you are the legitimate account holder and a scammer has convinced you to send money or change sensitive account information.
asserted
scammer → have → information
When you perform certain sensitive actions inside a supported third-party app, that app can ask Apple for a risk assessment.
asserted
app → perform → assessment
Apple says examples may include making a payment or changing critical security information such as a password.
uncertain
examples → say → password
The app then receives one of three risk levels:
asserted
app → receive → levels
- Unknown: No evidence of suspicious activity was detected.
asserted
evidence → detect → activity
Apple warns that this does not confirm the action is safe.
asserted
action → warn → ?
- Medium: Some signs of suspicious activity were detected.
asserted
signs → detect → activity
- High: Significant signs of suspicious activity were detected.
asserted
signs → detect → activity
From there, the app decides how to respond.
asserted
app → decide → ?
It might ask you to verify your identity, delay an action or display a warning before letting you continue.
uncertain
you → ask → warning
That could give you one more opportunity to stop when a scammer is rushing you through a payment or account change.
uncertain
scammer → give → change
How Apple's anti-scam feature decides something looks suspicious
Impersonation Risk Detection looks at signals related to how you are using your device.
asserted
you → decide → device
Apple says those signals can include interaction patterns, timing, context and basic sensor data.
asserted
signals → say → patterns
Apple's privacy documentation gives some additional examples.
asserted
documentation → give → examples
Your iPhone may consider whether you are sharing your screen as well as the approximate number of recent phone calls or emails you have received.
uncertain
you → consider → calls
It can combine that assessment with certain Apple Account information, including recent App Store downloads and purchases.
asserted
It → combine → downloads
The goal is to look for unusual behavior that could suggest someone is guiding or pressuring you.
uncertain
someone → look → you
This feature works only with third-party apps that support Apple's Impersonation Risk Detection system.
asserted
that → work → system
Turning it on does not give every app on your iPhone automatic scam detection.
asserted
Turning → turn → detection
What Apple can see when you use Impersonation Risk Detection
Apple says it never analyzes the content of your Photos, Messages or Mail for this feature.
asserted
it → see → feature
The underlying device information used to create the assessment also stays protected from both Apple and the requesting app.
asserted
information → underlie → Apple
There is still some information sharing you should understand before turning it on.
asserted
you → be → it
Your iPhone creates an on-device assessment and sends that assessment, rather than the underlying device data, to Apple.
asserted
iPhone → create → Apple
Apple can then combine it with certain Apple Account activity to generate the final risk signals.
asserted
Apple → combine → signals
Apple also learns the category of activity you were attempting, such as signing in or making a payment.
asserted
you → learn → payment
Apple says it does not learn which app requested the signals or the content of what you were doing inside the app.
asserted
you → say → app
The requesting app receives the resulting risk level.
asserted
app → request → level
…and 82 more, not listed.
The Aporia
