How To Enable iOS 27 Impersonation Risk Detection (And Fix It If It’s Missing)

If you updated to iOS 27 expecting Apple’s new iPhone scam protection to be working, it isn’t — Impersonation Risk Detection ships turned off.

That’s by design, not a bug, and Apple doesn’t prompt you to enable it during setup.

This guide shows you how to turn on iPhone scam protection in under a minute, then walks through what to check if the setting is missing, won’t switch on, or never seems to do anything.

At a glance: iOS 27 Impersonation Risk Detection

Question	Answer
On by default?	No
Where is the setting?	`Settings → Privacy & Security → Impersonation Risk Detection`
Toggle name	Share with App Developers
Minimum software	iOS 27 or iPadOS 27
Oldest supported iPhone	iPhone 11, iPhone SE (2nd generation)
Time for changes to apply	Up to 24 hours
Works in every app?	No, supported apps only
Reads Photos, Messages, or Mail?	No

Why did Apple leave iPhone scam protection off?

The feature shares a signal with third-party apps, so Apple made it opt-in.

The toggle is literally called Share with App Developers, which tells you what you’re agreeing to.

Once it’s on, a supported app can ask your iPhone one question before a risky action: does this look like a scam in progress?

The app gets back a single risk level and nothing else.

Step 1: Confirm you’re on iOS 27

The setting does not exist on iOS 26 or earlier.

Open Settings.
Tap General → About.
Check the iOS Version line.

If it shows anything below 27, go to Settings → General → Software Update and install iOS 27 first.

Supported models: iOS 27 runs on the iPhone 11 and later, plus the iPhone SE (2nd generation and later).

Apple released iOS 27 and iPadOS 27 on September 14, 2026.

Step 2: Turn on Impersonation Risk Detection

Open the Settings app.
Tap Privacy & Security.
Scroll down and tap Impersonation Risk Detection.
Turn on Share with App Developers.

The same steps work on an iPad running iPadOS 27.

Can’t find it? Pull down on the main Settings screen and type “Impersonation” in the search bar.

Step 3: Sign in to the App Store if the toggle won’t turn on

Apple says you might need to be signed in to the App Store with your Apple Account before the feature will enable.

Open the App Store.
Tap your profile icon in the top right.
Sign in with your Apple Account if you see a sign-in prompt.
Return to Settings → Privacy & Security → Impersonation Risk Detection and try the toggle again.

This is the most likely cause if the switch refuses to stay on.

Step 4: Wait out the 24-hour delay

Apple says changes to this setting can take up to 24 hours to take effect.

That applies in both directions, on and off.

The delay is deliberate.

A scammer coaching you over the phone would tell you to switch the protection off first, and the delay blunts that move.

Stakes warning: Apple’s own support page says that if someone directs you to turn this feature off, you might be the victim of a scam. No bank, government agency, or Apple employee has a reason to ask for that.

How does Impersonation Risk Detection actually work?

It targets active social engineering scams, where someone poses as a bank, a government agency, or a person you trust and pressures you into sending money or changing account details.

Two-factor authentication can’t stop these scams, because you’re the one approving the action.

When you start a risky action in a supported app, the app requests a risk assessment.

Your iPhone analyzes information about your device and Apple Account, then returns one of three levels.

Risk level	What Apple says it means	Treat it as safe?
Unknown	No evidence of suspicious activity detected	No
Medium	Some signs of suspicious activity detected	No
High	Significant signs of suspicious activity detected	No

Unknown is not a green light. Apple states plainly that an Unknown result doesn’t mean the action was confirmed as safe.

What happens when an app gets a Medium or High result?

The app decides, not Apple.

Apple says it doesn’t determine or control the action the app takes.

Possible responses include:

Identity check — the app asks you to verify who you are again.
Added delay — the app holds the payment or change for a cooling-off period.
Warning screen — the app shows a scam alert before you continue.

Two different apps can react to the same risk level in different ways.

Which apps support Impersonation Risk Detection?

As of September 18, 2026, Apple has not published a list of supported apps.

The feature is built on a developer framework called Trust Insights, which Apple introduced at WWDC 2026 in June.

Each developer has to add it to their own app.

Apple’s developer materials group the covered actions into five categories:

Payment — any exchange of money or assets, including in-game purchases.
Account — updating account details or security information.
Resource use — requests to costly infrastructure such as AI inference.
Communication — sending messages, submitting forms, or signing documents.
Other — anything that doesn’t fit the categories above.

Banking and payment apps are the obvious candidates, but adoption will vary app by app.

Step 5: Check whether any app is actually using it

If you turned the feature on days ago and have never seen a warning, this screen tells you why.

Go to Settings → Privacy & Security → Impersonation Risk Detection.
Look under Recent Activity for apps that have requested a risk assessment.
Look under Reasons for Access for the actions that triggered each request.

An empty list means none of your apps have adopted the feature yet.

That’s expected this soon after launch, and it isn’t a fault with your iPhone.

Step 6: Turn it off for one app without disabling everything

You can block a single app and keep the protection running everywhere else.

Open Settings → Privacy & Security → Impersonation Risk Detection.
Tap the app in the list.
Turn off the toggle for that app.

Per-app changes can also take up to 24 hours to apply.

What data does Apple collect when this is on?

Apple’s privacy statements for the feature are specific:

On-device analysis — interaction patterns, timing, context, and basic sensor data are analyzed on your iPhone, and Apple says it never receives that data.
No content scanning — Apple says it never analyzes the content of your Photos, Messages, or Mail.
What Apple learns — the type of action you attempted in the app when the risk assessment was requested.
What the app learns — only the risk level, not the information behind it.

What this feature will not protect you from

Impersonation Risk Detection is not a call blocker or a spam text filter.

It will not:

Flag a scam call, text, or email when it arrives.
Work inside apps that haven’t added support.
Stop a transfer on its own, since the app chooses the response.
Confirm that any payment is safe.

For incoming calls and texts, use the screening tools already in iOS. [INTERNAL LINK: iPhone call screening / Screen Unknown Callers guide]

Quick reference: which fix do I need?

Symptom	Likely cause	Go to
Setting doesn’t appear in Privacy & Security	iPhone is below iOS 27	Step 1
Toggle won’t switch on	Not signed in to the App Store	Step 3
Turned it on, nothing changed	24-hour activation delay	Step 4
On for days, no warnings ever	No installed app supports it yet	Step 5
One app keeps adding delays or checks	App is reacting to a risk level	Step 6
Someone told you to turn it off	Possible scam in progress	Step 4

If you’re on the phone with someone who is walking you through payment or password steps right now, hang up and call the company back on a number you look up yourself.