Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 00:50 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Teams: Phishing detection for messaging

Rollout

Roadmap
575288
Platforms
Android, Desktop, iOS, Mac, Web

Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".

What the notice says

Microsoft's text, with its sections, lists and tables; source markup removed

What and why

Microsoft Teams is introducing AI-powered, context-aware phishing detection to help identify phishing, social engineering, impersonation attempts, and deceptive intent. The capability analyzes conversation context to identify suspicious behavior that may not include traditional indicators such as malicious links or files.

Rollout schedule

  • Targeted Release: Beginning in early November 2026 and expected to complete by mid-November 2026
  • General Availability (Worldwide): Beginning in early December 2026 and expected to complete by mid-December 2026

Impact on your organization

Who is affected

  • For most users, detection focuses on external first-contact chats.
  • Teams mobile users in China may also receive additional phishing and fraud protection for in-tenant conversations.

Platforms and services

  • Microsoft Teams

What will happen

  • Teams will use AI-powered, context-aware detection to identify potential phishing and related suspicious behavior.
  • During initial quality validation, detection may run in the background without showing warnings to users.
  • After validation, users may see a warning when potential phishing is detected:
  • For Teams mobile users in China, additional protection may also apply to in-tenant conversations to address fraud patterns observed in the region.
  • This capability is used only for security protection and not for productivity, summarization, advertising, user monitoring, or other non-security purposes.
  • Customer message content is not retained by the detection system for model training or other secondary uses.
  • No new admin configuration is required.

Action required and recommendations

No admin action is required to enable this protection.

We recommend that admins review organizational guidance for interacting with unfamiliar external contacts and remind users to report suspicious activity or incorrect detections through available Teams reporting experiences.

Learn more

Compliance considerations

QuestionAnswer
Does the change alter how existing customer data is processed, stored, or accessed?Yes. Teams analyzes conversation context to detect suspicious behavior. The request states that customer message content is not retained by the detection system for model training or other secondary uses.
Does the change introduce or significantly modify AI/ML capabilities that interact with customer data?Yes. The change introduces AI-powered, context-aware detection that analyzes conversation context for phishing, social engineering, impersonation attempts, and deceptive intent.

What changed

Between the versions this installation saw, newest first

This installation has seen one version of this notice, first on 22 Oct 2026. Later changes will show here.

Linked documentation

Microsoft pages the notice links to

The notice links to no Microsoft Learn or Support page that this installation reads.

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 22 Oct 00:50 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current