Scammers Are Invading Video Calls, Microsoft Just Drew a Line

Scammers Are Invading Video Calls, Microsoft Just Drew a Line

Microsoft Teams is becoming the next major battleground in social engineering—and Microsoft knows it.

Starting next month, Microsoft will roll out a new security feature designed to stop one of the fastest-growing attack vectors in business today: brand impersonation during live calls.

It’s called Brand Impersonation Protection, and it fundamentally changes how Teams handles external callers.

The Threat: Trusted Voices, Fake Identities

Attackers no longer rely solely on emails or texts. Increasingly, they’re calling victims directly, posing as:

• Banks

• Vendors

• IT departments

• Government agencies

A live voice creates urgency, authority, and pressure—exactly what social engineers need to extract money, credentials, or sensitive data.

Microsoft is responding because these attacks are working.

What Brand Impersonation Protection Does

When an external caller contacts a Teams user for the first time, Microsoft will automatically analyze the call for impersonation signals.

If the system detects risk, users will see a high-risk warning before answering.

Key behaviors include:

• Caller IDs resembling known brands

• Patterns consistent with scam campaigns

• Signals associated with previously reported impersonation attempts

If suspicious behavior continues, warnings may persist during the call—not just at pickup.

Why This Matters More Than Email Security

Live calls bypass many of the instincts users have developed for phishing emails.

There’s no link to hover over.

No attachment to scan.

No time to think.

Victims are pressured in real time.

By inserting friction before the conversation begins, Microsoft is targeting the psychological leverage attackers depend on.

Enabled by Default—But Not Set-and-Forget

Microsoft confirmed the feature will:

• Roll out to the Targeted Release ring in mid-February

• Be enabled by default

• Require no admin configuration

But Microsoft is urging organizations to prepare anyway.

Why?

Because users will ask questions.

IT teams should:

• Update internal security training

• Brief helpdesk staff on new warnings

• Reinforce procedures for handling “urgent” external calls

Security tools fail when people don’t understand them.

Part of a Bigger Security Shift

This update isn’t happening in isolation.

Microsoft has already begun:

• Automatically blocking weaponizable file types

• Detecting malicious URLs in Teams messages

• Improving admin visibility into suspicious external domains

The direction is clear: collaboration platforms are now security perimeters.

The Bigger Picture

As remote work normalized, attackers followed.

Teams calls now carry the same risk profile emails once did—except the damage happens faster and feels more convincing.

Microsoft’s move acknowledges a reality many organizations haven’t fully faced yet:

Voice is the new phishing.

And without safeguards, trust becomes the vulnerability.

70% of all cyber attacks target small businesses, I can help protect yours.

#CyberSecurity #MicrosoftTeams #SocialEngineering #PhishingAttacks #BusinessSecurity