What happened
Microsoft announced that Teams will begin using AI‑powered, context‑aware phishing detection in early November 2026, focusing on external first‑contact chats and operating without retaining message content.
Why it matters for trust and compliance
- The feature provides a measurable control for detecting malicious activity, enabling continuous evidence collection and supporting privacy‑by‑design compliance.
- Adds a verifiable detection control that can be logged and presented as audit evidence.
- Supports privacy‑by‑design claims by confirming no message content is stored for training.
Who is affected
Enterprises using Microsoft Teams across all industries
Recommended actions
- Document the AI detection setting in Teams admin console as part of your security monitoring controls.
- Integrate the new detection capability into phishing awareness training and test its effectiveness.