Microsoft: Brand Impersonation Protection in Teams Calling

Microsoft is further strengthening the security of business communications by introducing a new feature for Teams Calling (Brand Impersonation Protection) that aims to detect suspicious external calls early. The feature is designed to warn users when an incoming call attempts to present itself as a trusted organization, when in fact it may be a fraud attempt.

When does the mood start?

According to Microsoft, the new feature will begin rolling out in mid-February 2026 to Targeted Release, with the initial phase expected to be complete by the end of that month. General availability timelines for all organizations will be announced in a later update, but the company has made it clear that the feature will be enabled by default for those using Microsoft Teams Calling.

See also: Microsoft Teams: Strengthening message security from 2026

How Brand Impersonation Protection in Microsoft Teams

The new feature is a proactive security check that evaluates incoming VoIP calls from external first-contact callers. Through red flag analysis, it attempts to identify patterns associated with fraud or impersonation, such as calls pretending to be from well-known companies, IT departments or financial institutions.

When the system classifies a call as high risk, the user will see a warning message before answering. If suspicious characteristics persist during the conversation, alerts can continue throughout the call, reminding that increased attention is required.

Defense against vishing and social engineering

This development comes at a time when attacks vishing – voice phishing – are on the rise. In these attacks, malicious actors exploit human trust and the pressure of the moment to extract credentials, financial information or lure users into harmful actions.

See also: Microsoft Teams: Admins will block external users from Defender Portal

With the new feature, Microsoft is attempting to reduce the risk of such attacks by giving users the ability to accept, block, or end a call based on the warnings that appear on their screen.

What it means for organizations and IT departments

Microsoft clarifies that no administrative action is required to enable the feature, nor are any changes to existing Teams Calling policies. Support covers platforms Windows and macOS, ensuring broad compatibility.

However, IT teams are urged to prepare organizationally. It is critical to educate support staff so that they can answer questions from users who encounter warnings about “high-risk calls.” At the same time, it is recommended to update internal training materialswith clear instructions on how employees should react when receiving such alerts.

Compliance and regulatory requirements

Microsoft has not identified any compliance issues related to the new feature to date, but each organization should evaluate its use against its own regulatory and legal obligations, particularly in industries with strict data protection frameworks.

See also: Microsoft Teams: New “Chat with Anyone” feature exposes users to Phishing attacks

The company has also announced that it will update documentation around caller ID security before full rollout, offering additional guidance to administrators and security teams.

Another step towards safer cooperation

Brand Impersonation Protection in Teams Calling is part of Microsoft’s overall strategy for secure digital collaboration. As phone attacks increasingly move to VoIP platforms, such early warning mechanisms can be a critical defense.

In an operational environment where human interaction remains the most vulnerable point, timely information and proper training, combined with technological solutions, remain the most powerful weapon against modern threats.