Apple Tests Smarter iMessage Protection in iOS 26.6

Apple is preparing a new iPhone security feature that could warn users when an incoming iMessage appears dangerous. The feature, called Malicious Message Detected, has been found in the fifth beta version of iOS 26.6, although Apple has not yet confirmed its inclusion in the final release.

How the New Warning Will Work

When a potentially harmful message is detected, the iPhone will display an alert explaining that the content may be trying to damage the device or compromise the user’s privacy. The warning could help protect users from phishing messages, spyware and other attempts to steal personal information.

Users will be offered three choices. They can share the suspicious message with Apple, dismiss the warning without reporting it or postpone the decision. Choosing to share the message would allow Apple to investigate the possible attack and use the information to improve future security protections.

It is not yet clear what types of messages will trigger the alert or how the iPhone will decide that content is malicious. The detection may be intended to identify sophisticated exploits as well as more familiar scams that encourage users to open dangerous links or attachments.

Fig 1. The alert warns users when an iMessage may threaten their device. (Source: @limpless_skelly)

Building on Existing iPhone Defences

Apple has introduced several protections against attacks delivered through its Messages app. In iOS 14, it added a security system called BlastDoor, which processes incoming message content in an isolated area to prevent malicious code from reaching other parts of the operating system.

However, no security measure is completely effective. In 2021, attackers used a zero-click iMessage vulnerability to bypass protections and install Pegasus spyware on targeted devices. Zero-click attacks are particularly dangerous because victims do not need to open a link, download a file or interact with the message.

Apple has since introduced Lockdown Mode for people at increased risk of targeted cyberattacks. It has also added iMessage Contact Key Verification, spam filtering and tools for separating messages from unknown senders. The new alert would provide another layer of protection by warning users before they interact with suspicious content.

Genuine Warning or Fake Pop-Up?

One concern is that early versions of the alert resemble fake security warnings sometimes displayed by scam websites. These pop-ups often claim that an iPhone has been infected and pressure the user to call a number, download software or visit another website.

If Apple’s genuine alert looks too similar, users may ignore it or struggle to distinguish it from a scam. Apple could still change the design before the update is released.

Users should avoid responding to suspicious messages or opening unexpected links and attachments. Genuine Apple security alerts will not normally ask for payment, demand that users call an unfamiliar phone number or direct them to install security software from an unknown website.

Apple has released five beta versions of iOS 26.6, suggesting that public testing is nearing completion. The update is expected around the end of July, but the feature could still be changed or delayed before launch.