iOS 27 introduces a new security feature called 'Impersonation Risk Detection' that helps protect users against scams, but it is turned off by default. This feature analyzes device and Apple Account information in real time to detect signs of active social engineering scams. When a risk level is determined, the app receives only that classification, not the underlying data.

Risk levels range from Unknown to High, prompting the app to ask for identity verification, add delays, or display warnings. Users can enable the feature by navigating to Settings, then Privacy & Security, and toggling on 'Share with App Developers.' Currently, the feature is only available in supported apps, as Apple has not published a complete list. Once active, it provides apps with a risk level to help prevent users from falling victim to scams involving bank details or financial information.

The implementation represents a new layer of security beyond traditional tools like two-factor authentication, which cannot always detect scams when the user voluntarily takes action.