Short Version
QR codes shared by external users in Teams messages will now be blurred by default, helping reduce phishing and fraud risk. You can still reveal the image if you trust the sender. Now due from late October to late November 2026.
Details
When an external sender shares an image containing a QR code in a Teams message, it will now appear blurred (1) rather than visible straight away. If you trust the sender and want to view or scan the code, you can reveal the image yourself (2).
Worth knowing: a blurred image doesn’t mean Teams has actually determined the QR code to be malicious; it’s applied automatically to every QR code image from an external sender, regardless of whether it’s genuinely risky. It’s a precaution, not a verdict.
This applies to Teams desktop, web, and mobile.
AvailabilityDue early to mid-October 2026.Now due late October 2026.
Now due from late October to late November 2026.
Source, related links and references
Images: Microsoft.
Roadmap ID 570439.
See what else is new for Microsoft Teams.
For Admins
No administrator configuration or policy changes are required. The protection is enabled by default as part of the rollout. MC1470410.
Page originally published
13th September 2026.
Would you and your colleagues like to attend a live webinar covering this month’s updates? Monthly, free, just 55 minutes and more fun than it sounds! Sign up for the sessions I deliver with The Inform Team: Microsoft 365 Evergreen.
