The new Persona Substitution Risk Detection feature in iOS 27 is also available in Italy and can be activated to more easily detect manipulation-based fraud attempts, a distinctive aspect of social engineering techniques.
Apple introduced in iOS 27 a new security feature call Detection of risks of person replacementdesigned to spot suspicious signals while using certain apps on your iPhone. The function does not consist of a simple filter to block unwanted phone calls or messages, but according to Apple it serves to «to protect against active social engineering fraud». An online payment, a change to the password of a social account or an update of banking details can turn into tempting opportunities for cyber criminals, who can exploit these pretexts to convince potential victims to carry out apparently legitimate actions. In reality, behind these requests there could be a well-orchestrated fraudulent scheme. To combat this type of scam, the function in question could be very useful (even if it does not replace the caution that each of us should always have online). We see how to activate the hidden function to prevent scams on iOS 27.
How person substitution risk detection works and what purpose it serves
Let’s see first what is the purpose of detecting risks of person replacement starting from an assumption: not all computer scams work through malicious links or malicious software. In many cases, criminals try to directly manipulate victims into sharing confidential information, making payments, or changing account credentials using a technique known as social engineering. This includes all those psychological strategies used to induce a person to make decisions that favor the scammer.
Think, for example, of someone who poses as a fake bank operator or a fake official of a public body and convinces their victim to change the security settings of their account because, if they don’t, it could impact them with some type of security problem. Since, also due to the advent of AI, this type of attack is becoming more and more common, and unfortunately more and more effective, traditional tools such as two-factor authentication, which requires additional verification in addition to the password, are not always sufficient to prevent these frauds. If whoever contacted you makes you believe that it is Truly the bank operator, for one thing, you could trust to the point of giving them the code generated by the two-factor authentication system, thus making this security system easily breachable.
It is precisely in situations of this kind that the new function available in iOS 27 (and also in iPadOS 27) comes into play. The operating system can analyze some signals associated with the use of the device and your Apple Account to estimate the risk of suspicious activity. The result is then communicated to the app that requested the verification (for example that of the bank, to stay with the same example), which can decide how to behave: it could show a warning, ask for further confirmation of identity or introduce a delay before allowing a certain operation.
The limits of the iOS 27 anti-scam feature
However, its operation does not equate to an automatic blocking of all scams. This is worth specifying. The function actually provides a assessment of the risk, while it is then up to the individual app to decide which measure to adopt. Furthermore, the system is only available in applications that support this technology: not all operations performed on your iPhone or iPad are therefore controlled in this way. And this is why, even after activating the setting, we must always maintain a high level of attention when we are online and when external parties contact us by telephone, e-mail or message.
The returned evaluation can take three different levels of risk. The first is Unknownand indicates no detected evidence of suspicious activity, but does not guarantee that the operation is safe. The level Medium highlights the presence of possible anomalous activities, while that High highlights the presence of more significant signs of a possible fraud attempt. It is through these three degrees of risk that the app involved can calibrate its response, without it being necessary to automatically consider every single operation dangerous.
How to activate and use it on iPhone
For Enable impersonation risk detection on iPhonefollow these simple steps.
- Open the app Settingsscroll through its home screen and tap the entry Privacy and security.
- Scroll through the list of options that appear on the screen and, once you have identified the item Detection of risks of person replacementtap on the latter.
- Move up Hon the switch next to the item Share with app development companies confirming this with a tap on the button Share with app development companies.
- To complete activation you may need toaccess the App Store with your Apple Account. If this is the case in your case, log in as usual.
Once detection is active, you don’t necessarily have to give this feature indiscriminate access to all apps. You can check which apps have requested a rating and why. In the section Recent activities find the requests made by applications, while in Reasons for access you can review the actions that generated these requests. If you don’t want a specific app to use the feature, you can select it and disable it switch. Please note that changes, both to the general setting and to individual app permissions, may take up to 24 hours to take effect.
