Microsoft Teams New Feature to Flag Suspicious One-to-One Calls
Microsoft Teams is introducing a new security feature designed to help organizations identify and mitigate voice-based scams and phishing attacks. This addition aims to enhance the security of one-to-one calls on the platform.
Microsoft Teams is introducing a new security feature designed to help organizations identify and mitigate voice-based scams and phishing attacks. This addition aims to enhance the security of one-to-one calls on the platform.
The new "Report a Call" functionality allows users to flag suspicious calls directly from their Teams call history. This feature is being implemented as attackers increasingly utilize voice calls to extract credentials, financial information, or sensitive business data from employees.
The "Report a Call" option will be available in the call history for one-to-one calls on Teams across Windows, Mac, and web platforms. Users can report a call by selecting the "more options" menu next to a call entry and choosing "Report a Call" if they suspect it to be fraudulent or unsolicited.
When a call is reported, limited call metadata and contextual information, such as call time, duration, caller ID, and Teams user IDs, will be shared with the organization and Microsoft. Audio content will not be included in the shared data.
Microsoft Teams is introducing a new security feature designed to help organizations identify and mitigate voice-based scams and phishing attacks.
Platforms: Windows, Mac, Web Data Shared: Basic call metadata only Security Visibility: Reports in Defender portal & Teams Admin Center Default Status: Enabled by default Admin Control: Can be disabled in Calling settings
Security teams will have access to user-reported call data through the Microsoft Defender portal, provided they have the appropriate Defender plan. Administrators can also access these reports in the Teams Admin Center under Analytics & Reports > Protection reports > User-reported security submissions.
Organizations can manage the feature through the Teams Admin Center, where they can disable the "Report a Call" option if necessary. Microsoft recommends enabling call reporting in the Defender portal for enhanced insights.
The rollout for targeted release tenants will commence in mid-March 2026, with completion expected by late March 2026. General availability worldwide is anticipated between mid- and late April 2026.
Microsoft advises organizations to inform users about the new feature and its appropriate use to enhance protection against voice-based threats.
Based on reporting by Cyber Security News.