Detection of QR-based threats
Microsoft has announced plans to integrate near-real-time detection of malicious QR codes within Microsoft Teams. This feature is designed to identify phishing and fraud attempts where a link is embedded inside a square barcode image rather than sent as plain text.
When a user receives a QR code in a message, the system will analyse the destination address. If the link is found to lead to a known malicious site, Teams will apply protections similar to those used for standard web links. This process is intended to reduce the risk of 'quishing', a term for phishing attacks that use QR codes to hide their destination from both users and automated security software.
Why this is being introduced
Standard email and message filters are often effective at identifying suspicious text links. However, attackers have increasingly turned to QR codes because the malicious URL is contained within an image. Historically, this has made it harder for security tools to read and block the link before the user interacts with it.
By scanning these codes as they are sent or received, Microsoft aims to close this gap in coverage. The system will check the embedded address against databases of reported malicious sites to prevent users from being directed to credential-harvesting pages or malware downloads.
Timeline and availability
According to the Microsoft 365 roadmap, this feature is scheduled for general availability in December 2026. This is a distant target date, and it is common for such timelines to shift as development progresses.
Until this protection is active, businesses should advise staff to be wary of any QR codes received in chat messages, particularly from external parties. Verifying the source of the message through a different communication channel remains a reliable way to avoid falling for these types of fraud.