Most phone scams don't break any security at all. Someone rings pretending to be your bank, keeps you on the line, and talks you into moving the money yourself. Two-factor codes don't help there, because you're the one doing it. Apple's trying a new answer to that in iOS 27, with a setting called Impersonation Risk Detection.

Image: Apple