Microsoft Teams phishing detection will warn you about suspicious first messages from people outside your organization. Microsoft message center post MC1519866, published October 21, 2026, puts the rollout in early November 2026 and needs no admin setup. This guide covers what the check looks at, the dates, what Microsoft leaves open, and the checks that stay yours.
What does the new Teams phishing detection check?
It checks the conversation itself, not only links and files. MC1519866, which we opened on October 30, 2026, describes AI-powered, context-aware detection of phishing, social engineering, impersonation attempts and deceptive intent, and says it can flag suspicious behavior that has none of the usual indicators such as a malicious link or file.
Computerworld, writing on October 26, 2026, quotes Microsoft as saying the tool looks for suspicious behavior in the messages themselves. The post lists Android, desktop, iOS, Mac and web as platforms.
Which Teams chats are covered, and when does it start?
For most users it focuses on external first-contact chats, meaning the first message from someone outside your organization, and Targeted Release starts in early November 2026. The post says Teams mobile users in China may also get protection on in-tenant conversations. Microsoft names no admin configuration, so if you run Teams for a company the feature arrives on its own schedule.
| Feature | What Microsoft states | Source |
|---|---|---|
| Targeted Release | Early November 2026, complete by mid-November 2026 | MC1519866, October 21, 2026 |
| General Availability | Early December 2026, complete by mid-December 2026 | MC1519866, October 21, 2026 |
| General Availability, press report | First half of December 2026 | Computerworld, October 26, 2026 |
| Chats covered | External first-contact chats; in-tenant chats for Teams mobile users in China | MC1519866 |
| Admin setup | None; "No new admin configuration is required" | MC1519866 |
| Platforms | Android, desktop, iOS, Mac, web | MC1519866 |
Microsoft's post and Computerworld agree that Targeted Release comes first in November 2026 and General Availability in December 2026, and differ only in how they word the end of that window, so plan for December rather than a fixed day.
Will Teams always warn you before you click?
No. Microsoft says that during initial quality validation the detection may run in the background without showing warnings, and that after validation users may see a warning when potential phishing is detected. The wording is "may" both times, so a quiet chat window is not a safety signal.
The post also asks users to report suspicious activity or incorrect detections through Teams reporting.
What does Microsoft do with the messages?
Microsoft says the feature is used only for security protection, not for productivity, summarization, advertising or user monitoring, and that customer message content is not retained by the detection system for model training or other secondary uses. The same post notes that the change alters how existing customer data is processed, so an admin who keeps a data-processing record may want to read it in full. Computerworld repeats the no-training claim.
What should you still check yourself in a first-contact Teams chat?
Treat a warning as a second opinion, not a verdict, and run these checks before you reply to someone who has never written to you. They are our checklist, not Microsoft guidance.
- Look at the sender's organization name and domain, not only the display name.
- Ask whether you expected a contact from that person or company this week.
- Do not act on a request for money, gift cards, credentials or a changed bank detail inside the chat.
- Confirm the request through a channel you already trust, such as a phone number from your own records.
- Use the Teams report option for a suspicious message or an incorrect warning.
Where does Nolario fit next to Teams phishing detection?
Nolario pulls Teams chats into the same feed as Gmail, Outlook and Slack and scores each item from 0 to 100, so a Teams chat is ranked next to the email that needs you. It does not detect phishing in Teams chats and does not replace Microsoft's warning. Teams chats work for work and school Microsoft accounts only, Nolario never sends a message for you, and it is a desktop web app with no mobile app yet. Nolario is in early access. Access is by waitlist, joining the waitlist is free, and the product opens to waitlist members between May and August 2027.
For the wider question of what an AI sees when it reads your messages, read is it safe to let AI read your email. If a Teams message is the one that gets buried, see keeping Outlook and Teams from burying a deadline, Teams message reminders, and the integrations page.
