MC1536056 - Microsoft Teams: Facilitator Protection skill helps identify suspected social-engineering attempts

Message Center

Summary

Microsoft Teams' Facilitator Protection skill uses AI to detect suspected social-engineering attempts in meetings with external participants by analyzing transcripts. If detected, users receive warnings with options to end the meeting or restrict sharing. It rolls out worldwide from late January to mid-February 2027, requiring no user action.

Discussionpowered by zap.ms

Published

Nov 3, 2026

Service

Microsoft Teams

Tag

New feature
User impact
Admin impact

Platforms

Desktop
Mac

More information

What and why

Facilitator can help users identify suspected social-engineering attempts by people outside their organization during a meeting. When Facilitator is present, its Protection skill uses AI to check the meeting transcript for signs that someone may be attempting to trick users into sharing sensitive information. If a suspected attempt is detected, users will see a warning with options to end the meeting or temporarily restrict information sharing.

This feature can help organizations reduce the risk of sensitive information being disclosed through social engineering during meetings with external participants.

Rollout schedule

  • General Availability (Worldwide): Beginning in late January 2027 and expected to complete by mid-February 2027

Impact on your organization

Who is affected

  • Users who use Facilitator in meetings with participants outside their organization

Platforms and services

  • Microsoft Teams
  • Facilitator

What will happen

  • When Facilitator is present in a meeting with participants outside your organization, the Protection skill is invoked automatically.
  • The Protection skill uses AI to check the meeting transcript for signs of suspected social-engineering attempts.
  • If a suspected attempt is detected, users will receive a warning.
  • Users will have options to end the meeting or temporarily restrict information sharing.
  • No action is required to enable the Protection skill.

Action required and recommendations

No action is required to enable the Protection skill.

We recommend that you:

  • Inform users that they may receive warnings about suspected social-engineering attempts during meetings with external participants.
  • Help users understand the available options if a warning appears.
  • Review the Facilitator documentation to familiarize yourself with the feature.

Compliance considerations

This change introduces an AI capability that interacts with customer data. When Facilitator is present, the Protection skill uses AI to check the meeting transcript for signs of suspected social-engineering attempts.