Bgr iOS 27 Introduces Impersonation Risk Detection to Combat Scams
Article Content
- •Impersonation Risk Detection is a new feature in iOS 27 aimed at preventing social engineering scams.
- •Users must manually enable the feature in Settings, as it is off by default.
- •The feature categorizes risk into three levels without sharing specific user data with apps.
Apple's iOS 27 features a new security measure called Impersonation Risk Detection, aimed at preventing social engineering scams that traditional two-factor authentication may miss. This feature allows supported banking and payment apps to request a risk assessment from the iPhone before processing payments or account changes. Users must enable the feature in Settings under Privacy & Security, as it is turned off by default. The risk assessment categorizes potential threats into three levels: Unknown, Medium, and High, without revealing specific details to the apps. This update was first announced on September 14, 2026, and is designed to enhance user protection against impersonation scams. The feature's effectiveness relies on app developers implementing it, and it may take up to 24 hours to start functioning after activation.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
How do I enable Impersonation Risk Detection?
What risk levels does the feature provide?
Is my data safe with this feature?
Continue Reading
Binance Hack: $6.3 Billion Stolen in Largest Crypto Heist On October 29, 2026, Binance, the world's largest cryptocurrency exchange, reported a major security incident involving an estimated $6.3 billion in stolen funds. The attack was attributed to a compromised laptop belonging to a DevOps engineer, allowing unauthorized withdrawal transactions. Approximately $3 billion in…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…