Microsoft Teams to get AI-powered, context-aware phishing detection

Microsoft announced plans to deploy AI-powered phishing detection in Teams messages beginning November 2026, targeting suspicious behavior in conversations without relying solely on traditional indicators like malicious links or files. The detection uses conversation context to identify phishing and impersonation attempts, focusing on higher-risk scenarios such as external first-contact chats. Microsoft clarified that message content is not retained for model training or non-security purposes. The rollout is part of a phased release expected to complete by mid-December 2026 and complements other Teams security features like external user locking, bot blocking in meetings, QR code blurring, and guest invitation reporting.

This new AI-powered phishing detection feature enhances Microsoft Teams' ability to identify and mitigate phishing and social engineering attacks in messaging, particularly in external first-contact chats. By detecting suspicious behavior beyond traditional indicators, it potentially reduces the risk of successful phishing attempts and impersonation attacks within Teams communications. Since the feature is integrated into Teams and requires no user or admin action to enable, it provides seamless protection. There is no indication of exploitation or active threats related to this feature at this time.

No action is required by IT administrators or users to enable this protection, as Microsoft will automatically roll out the AI-powered phishing detection feature. Organizations should monitor official Microsoft communications for updates on the rollout and ensure Teams clients are kept up to date to benefit from this and other security enhancements.