Microsoft Teams Adds New Feature to Report Suspicious and Scam Calls
Jan 30, 2026
Microsoft is adding a new call reporting function to Microsoft Teams that will allow users to flag suspicious or unwanted calls — including potential scams and phishing attempts — directly from their call history. This feature is designed to give organizations early visibility into voice-based threats and support stronger incident response workflows across Teams calling.
What’s Changing in Teams
Feature | Description |
|---|---|
Report a Call | Users can flag suspicious one-to-one calls as potential scams, phishing attempts, or unwanted contacts. |
Enabled by Default | The feature is on by default for users, though administrators can disable it if needed. |
Platforms Supported | Available in Teams call history on Windows, Mac, and the web. |
Metadata Shared | Limited call metadata (timestamps, duration, caller ID, Teams user IDs) is shared with organizations and Microsoft when a report is submitted. |
Defender Integration | Organizations with Microsoft Defender for Office 365 (Plan 1/Plan 2) or Defender XDR can view detailed reports in the Microsoft Defender portal. Basic data is visible in the Teams Admin Center. |
Rollout Timeline | Targeted Release begins mid-March 2026, with general availability by late April 2026. |
Why This Matters
Until now, Teams users had no simple way to report suspicious calls, leaving security teams without insight into potentially malicious voice-based interactions occurring inside their environments. This limitation particularly impacted visibility into social engineering and vishing attacks — where threat actors use phone or VoIP calls to deceive users into revealing credentials, installing malware, or transferring funds.
By enabling users to report calls directly from their history feeds, Microsoft aims to:
Empower end users to participate in threat detection, not just rely on automated systems.
Surface early indicators of malicious activity to security teams before larger compromise.
Provide actionable telemetry for SOC teams to investigate and remediate issues.
Complement existing protections such as caller spam filtering and brand impersonation warnings.
Integration With Defender and Admin Tools
Security teams with Defender licensing (Office 365 Plan 1 or Plan 2, or Defender XDR) can access detailed call report data in the Microsoft Defender portal, helping analysts investigate the context of suspicious calls. Organizations without Defender can still view user-submitted reports in the Teams Admin Center under Protection Reports > User-Reported Security Submissions.
Admins who want to turn off the Report a Call feature can do so through the Teams Admin Center under Calling settings.
Rollout and Availability
Mid-March 2026: Targeted Release customers start seeing the feature.
Late March 2026: Targeted Release rollout completes.
Late April 2026: Feature reaches general availability worldwide.
This phased rollout gives organizations time to prepare internal guidelines and user communication strategies ahead of broader deployment.
Preparing Your Team
To make the most out of this new reporting capability, organizations should:
Educate users about when and how to use the Report a Call option.
Ensure Defender reporting settings are configured to receive detailed submissions.
Update internal incident workflows to include suspicious call review and follow-up.
Combine user reports with other Teams security tools like spam filtering and call-impersonation warnings for broader protection.
Looking Ahead
This update is part of Microsoft’s broader push to strengthen Teams security amid rising threats that abuse collaboration and communication platforms. Combined with features such as brand impersonation call warnings and advanced messaging protections, the new reporting feature helps close visibility gaps — especially against vishing and social engineering campaigns that evade traditional email-centric defenses.
Summary: Microsoft Teams’ new Report a Call feature gives users a way to flag suspicious calls as potential scams or phishing attempts, empowering organizations to spot and respond to emerging threats. Rolling out from mid-March 2026, this addition enhances voice-based threat visibility and strengthens overall Teams security posture.






