Your iPhone Might Soon Sound the Alarm on Dangerous iMessages

While all eyes are on iOS 27 right now — especially with this week’s public beta releases — Apple isn’t giving up on iOS 26 just yet. Over the past few weeks, iOS 26.6 has been running in a parallel beta program, and while the point release isn’t expected to have any groundbreaking new features this late in the game, it could be adding a new way to protect users from particularly nasty text messages.

Apple added built-in spam protection in iOS 26 last year, offering up a new spam folder that once required third-party apps like Malwarebytes to unlock. This enhanced the existing ability to filter unknown senders with an extra layer of protection by redirecting messages that clearly had the earmarks of spam into their own separate list, keeping them isolated from those that merely came from folks not in your contacts list.

That’s an important distinction when it comes to text messages, since things like one-time verification codes and notifications from delivery services are usually “unknown” senders, but they’re typically not the same as spam.

However, while Apple would separate these messages and provide a few additional options for dealing with them, it didn’t do much to warn users about texts that crossed the line from “merely annoying” to “potentially dangerous.”

That may be about to change in iOS 26.6 (and presumably iOS 27 as well). As shared by MacRumors, app developer @limpless_skelly has discovered a new “Malicious Message Detected” feature that will warn you when a message could “harm your iPhone or compromise your privacy.”

While it’s not apparent from the developer’s tweet, Juli Clover notes at MacRumors that the post is “a mockup of the notification,” and the actual alert has yet to be seen. Instead, this comes from code found in iOS 26.6 beta 5, which was released yesterday alongside the iOS 27 public betas.

The alert recommends users share the message with Apple, with an option to do so that’s joined by “Not Now” and “Don’t Report.” It’s unclear how these differ, but Clover suggests that “Not Now” may just defer the pop-up so you can deal with it later.

The mockup also uses the word “Message,” so we’re not sure if this applies only to iMessages sent through Apple’s network or also RCS or SMS messages received by the iPhone. The latter would offer much greater protection, but there’s no insight yet into the method that iOS 26.6 is using to decide what constitutes a malicious message.

It’s also worth noting that just because this has been found in the iOS 26.6 beta code doesn’t mean it will actually ship with iOS 26.6. Apple often slips new features in for internal testing long before they show up in public releases — and this sometimes happens even across major iOS versions, so we can’t assume that the presence of this warning in iOS 26.6 means that it will arrive before iOS 27. After all, code for what would eventually become the AirTag was found in the first iOS 13 betas almost two full years — and one and a half iOS versions — before the product actually arrived.

While Apple already offers “BlastDoor” to protect users from the most dangerous “zero-click” exploits, such as those used by Pegasus and other industrial-grade spyware, there’s a huge middle ground, from everyday phishing messages that can absolutely “compromise your privacy” if you follow through on them, to exploits and malformed messages that can crash your iPhone.

Apple typically addresses the latter with fixes rather than warnings, so we’re still not sure what to make of the “trying to harm your iPhone” part of this alert, but presumably it’s for those texts that fall into a gray enough area that Apple doesn’t want to risk blocking potentially legitimate messages. We’ll have to wait and see what Apple is up to with this one when (and if) it ever turns into a user-facing alert.