Microsoft Teams will add AI anti-phishing and fraud protection features
Microsoft will add AI security features to Teams that analyze conversation content to identify phishing, scams, and identity theft, with a focus on new contacts. The feature no longer only checks malicious links and files, but instead identifies suspicious behavior in messages; Microsoft says messages will not be stored or used to train models, nor used for monitoring or advertising. The feature will begin rolling out in early November 2026 and is expected to be fully available in the first half of December; IT teams will not need to configure anything, as it will be enabled automatically.
Why read this
AI score 53
The original text explains the detection approach, default enablement method, and rollout timeline of the new Teams security feature, so readers can assess its impact on existing security processes.
Topics
Body
Microsoft is adding a new AI-powered security feature to Teams aimed at detecting phishing, scams, and identity theft by analyzing conversations, Bleeping Computer reports.
Instead of primarily checking for malicious links and files, the tool will be able to identify suspicious behavior in the messages themselves, Microsoft said. The feature will primarily be used for new contacts, as they pose a higher security risk.
The new security feature follows earlier warnings from Microsoft about attackers impersonating help desk staff in Teams to trick users into granting them remote access.
In a Microsoft 365 Message Center post (mirror), the company said, “During initial quality validation, detection may run in the background without showing warnings to users. After validation, users may see a warning when potential phishing is detected.”
According to Microsoft, no messages will be saved or used to train AI models. The tool will also be used solely for security purposes — not, for example, for surveillance or advertising.
The rollout will begin in early November 2026 and is expected to be generally available during the first half of December. IT teams do not have to configure the feature; it will be automatically enabled.
This story originally appeared on Computer Sweden.
Related:
New malware turns Microsoft 365 and Azure into its control center
Video: How modern work is creating a cybersecurity nightmare