Apple’s Impersonation Risk Detection is turned on in Settings > Privacy & Security > Impersonation Risk Detection. Enable Share with App Developers to let compatible apps request scam-risk assessments during certain actions. The feature is available starting with iOS 27 and iPadOS 27, and an App Store sign-in may be required.
Turn on Impersonation Risk Detection
Your iPhone or iPad must be running iOS 27 or iPadOS 27. The feature works only in apps that support it, so enabling the setting does not make every app able to request an assessment.
- Open Settings.
- Tap Privacy & Security, then tap Impersonation Risk Detection.
- Turn on Share with App Developers. Apple says you might need to sign in to the App Store with your Apple Account.
To check that sharing is enabled, return to the Impersonation Risk Detection screen and confirm that Share with App Developers is on.
Review and control app requests
A supporting app can request an assessment when you take an action it considers potentially risky, such as making a payment or changing account-security details. The app decides whether to show a warning, ask you to verify your identity, or add a delay.
In Recent Activity, you can see which apps recently requested an assessment. Reasons for Access lists the actions that prompted requests. To stop an individual app from accessing the feature, tap that app in settings and turn off its access.
Changes to the overall setting or an individual app’s access may take up to 24 hours to take effect. Apple also warns that someone urging you to turn off the feature could be part of a scam.
Understand the risk levels
The feature returns one of three levels to a supporting app:
- Unknown: No suspicious evidence was detected. This does not confirm that the action is safe.
- Medium: Some signs of suspicious activity were detected.
- High: Significant signs of suspicious activity were detected.
Apple’s feature assesses signs of active social-engineering scams during certain app actions. It is not a spyware scan or a diagnosis of whether the iPhone is monitored or compromised.
What Apple says about privacy
Apple says interaction patterns, timing, context, and basic sensor data are analyzed on the device. Its privacy notice explains that the device sends an assessment to Apple, which combines it with Apple Account information to generate risk signals for the requesting app. Apple says it does not receive the underlying device-use information, and does not learn which app requested a signal or the content of the in-app activity. It can learn the category of action attempted, such as signing in or making a payment. Apple also says the feature does not analyze the contents of Photos, Messages, or Mail.
Quick reference
- Enable: Settings > Privacy & Security > Impersonation Risk Detection > Share with App Developers.
- Review or revoke access: Check Recent Activity and Reasons for Access, then adjust access for an individual app in settings.
- Read results carefully: Unknown means no suspicious evidence was detected, not that an action was confirmed safe.
