Microsoft Teams update: QR code protection for messages from external users

Microsoft Teams is adding extra security to protect users from phishing and fraud. QR code images sent by external users will be hidden by default. Users can choose to reveal the image before viewing or scanning the QR code.

Rollout schedule

1. Targeted Release: Beginning in October 2026 
2. General Availability (Worldwide): Beginning in late October 2026

Impact on your organization

Who is affected

• Organizations that allow communication with external users in Microsoft Teams.
• Users who receive Teams messages from external senders.
• Teams administrators and support teams that manage external collaboration policies.
• QR code images sent by external users will be blurred by default in Teams messages.
• Users can reveal the image if they trust the sender and want to scan the QR code.
• A blurred image does not mean the QR code has been identified as malicious.
• This protection will be applied automatically to QR codes received from external users.
• No admin configuration or policy changes are required.
• The feature will be enabled by default during the rollout.

Action required and recommendations

• No admin action is required before rollout.
• Inform users that QR code images from external senders may appear blurred by default.
• Remind users to verify the sender before revealing or scanning QR codes.
• Review existing user education materials related to phishing awareness, QR code safety, and external collaboration.
• Update internal help desk documentation to reflect the new user experience.

https://un5gmtkzggtb9apnm3rj8.subtlesoundimmersion.net/feed/update/urn:li:activity:7520938452184408065/