Are You Protected? 4 Flagship Phones Security Test Results

Phone-based scams cost consumers billions annually (approximately $1.9 billion in 2024, with a median of $1,500 per person, according to the FTC). Now we know that’s not only a human factor. A new security assessment reveals stark differences in how well flagship smartphones protect users from fraud, theft, and identity theft.

Leviathan Security Group conducted an extensive evaluation of four popular devices: Google Pixel 10 Pro, iPhone 17 Pro, Samsung Z Fold 7, and Motorola Razr+ 2025. They tested dozens of security features under real-world conditions. The results challenge common assumptions about mobile security.

How the Test Worked

Security researchers tested phones “as shipped” by manufacturers, installing only official updates without third-party apps or premium subscriptions. Each device was provisioned on T-Mobile’s US network, along with its associated email accounts.

The assessment focused on three critical areas:

• Account-based protections: How well user accounts resist unauthorized access.
• Communication security: Protection against scam calls, phishing emails, and fraudulent messages.
• Device security: Anti-theft features, encryption, and malware defenses.

The Security Feature Comparison

Here’s what the security assessment revealed about key fraud prevention capabilities:

*Paid iCloud+ subscription required
**iMessage only, not compatible with Android

Critical Gaps Discovered

The study uncovered significant differences in proactive fraud protection:

• Real-Time Scam Detection: Only one device, the Google Pixel 10 Pro, offers AI-powered real-time scam detection during active phone calls. This feature analyzes conversation patterns as they occur and alerts users to potential fraud attempts before any damage is done.
• In-Call Protection: The Pixel 10 Pro also uniquely prevents sensitive apps from running and blocks system changes during calls, specifically designed to thwart social engineering attacks where scammers convince victims to change security settings.
• Messaging Scam Detection: Three of four Android devices (Pixel, Samsung Z Fold 7, Razr+) use on-device AI to detect suspicious patterns in SMS and RCS messages. The iPhone 17 Pro lacks this proactive detection, relying instead on manual user reporting and carrier-level filtering.
• Email Masking: The iPhone 17 Pro is the only device that offers email masking out of the box, although it requires a paid iCloud+ subscription. This feature creates temporary email addresses to protect users from spam harvesting and tracking.

Advanced Theft Protection: New Battleground

Android 16 introduces sophisticated anti-theft features not present in iOS 26:

• Theft Detection Lock: Utilizes AI to analyze device sensors, motion patterns, Wi-Fi connections, and other data from smart devices. If the phone detects that it has been stolen (such as a sudden snatching motion), it automatically locks the screen.
• Offline Device Lock: Recognizes when a device has been taken offline for an extended period (a common tactic used by thieves) and automatically secures the screen.
• Identity Check: Requires biometric authentication (fingerprint or face, no PIN fallback) before making sensitive setting changes when the device is in an unfamiliar location.
• Remote Lock: Allows users to lock their device remotely using only their verified phone number at android.com/lock, even without accessing their Google account.

The iPhone 17 Pro’s Stolen Device Protection requires the Find My feature to be enabled beforehand and relies on biometric authentication in unfamiliar locations, but lacks the proactive AI-based theft detection.

Device Security Comparison

Access Control

• All devices: PIN/password, facial recognition.
• Android devices only: Fingerprint sensor, pattern unlock.
• Razr+ 2025 only: PIN scrambling to prevent shoulder surfing.

Malware Protection

• Android devices: Google Play Protect scans all apps by default.
• Samsung Z Fold 7: Additional Samsung Knox protection layer.
• iPhone 17 Pro: App sandboxing and strict App Store vetting (no traditional antivirus).

Encryption

All four devices use 256-bit AES encryption by default. The iPhone uses a dedicated Secure Enclave for sensitive data, while Android devices use Trusted Execution Environment (TEE) within the main processor.

Email and Browsing: Nearly Even

Both ecosystems performed similarly in web and email protection:

Gmail (Android devices):

• automatic spam filtering enabled by default;
• images loaded through Google proxies to prevent tracking;
• links in spam messages temporarily uploaded to Google for safety verification.

iCloud Mail (iPhone):

• automatic spam filtering;
• mail Privacy Protection masks IP addresses and prevents tracking by default;
• links from unknown senders blocked automatically.

Web Browsing: All devices use Google Safe Browsing technology. Safari (iPhone) and Chrome (Android) both displayed appropriate warnings when researchers visited simulated phishing sites and pages with security certificate issues.

Account Security: Strong Across The Board

All tested devices offer robust account protection:

Multi-Factor Authentication:

• Google accounts: SMS, voice call, one-time passwords, Google Authenticator, FIDO hardware keys.
• Apple accounts: Biometrics, trusted devices, trusted contacts, FIDO hardware keys.

SIM Swap Protection:

• iPhone 17 Pro: eSIM requiring device access for changes, optional eSIM PIN.
• Android devices: SIM card PIN protection, multiple authentication steps for carrier. changes

Secure Payments:

• Google Wallet (Android devices).
• Apple Pay (iPhone).

Both use biometric authentication and tokenization to protect payment data.

What the Numbers Show

Based on the comprehensive feature matrix, here’s how devices scored on communication-based security features (13 total categories):

• Google Pixel 10 Pro: 12/13 features (missing only email masking without a paid service).
• Samsung Z Fold 7: 10/13 features.
• Motorola Razr+ 2025: 10/13 features.
• iPhone 17 Pro: 9/13 features (includes paid email masking option).

The Pixel’s lead comes primarily from AI-powered proactive detection features: real-time in-call scam warnings, messaging scam detection, and in-call action blocking.

The Bottom Line

The security landscape has shifted. Google’s investment in AI-powered fraud detection delivers measurable advantages in proactive scam prevention, while Android 16’s theft protection features go beyond what iOS currently offers.

However, the iPhone maintains advantages in ecosystem control, hardware security isolation, and out-of-box privacy protections. Apple’s curated App Store also presents fewer opportunities for malicious apps compared to Android’s more open ecosystem.

All four tested devices provide strong baseline security with encryption, biometric authentication, and regular updates. The meaningful differences emerge in advanced fraud prevention, where AI integration and proactive detection increasingly separate market leaders from followers.

For consumers, the choice depends on priorities: maximum proactive fraud protection versus ecosystem integration and simplicity. As phone scams become increasingly sophisticated, devices with AI-powered detection may prove essential rather than merely optional.

Full testing methodology and detailed findings are available in the complete report “October 2025 Mobile Platform Security & Fraud Prevention Assessment” by Leviathan Security Group.