Microsoft Teams: Facilitator Protection skill helps identify suspected social-engineering attempts

[What and why]

Facilitator can help users identify suspected social-engineering attempts by people outside their organization during a meeting. When Facilitator is present, its Protection skill uses AI to check the meeting transcript for signs that someone may be attempting to trick users into sharing sensitive information. If a suspected attempt is detected, users will see a warning with options to end the meeting or temporarily restrict information sharing.

This feature can help organizations reduce the risk of sensitive information being disclosed through social engineering during meetings with external participants.

[Rollout schedule]

• General Availability (Worldwide): Beginning in late January 2027 and expected to complete by mid-February 2027

[Impact on your organization]

Who is affected

• Users who use Facilitator in meetings with participants outside their organization

Platforms and services

• Microsoft Teams
• Facilitator

What will happen

• When Facilitator is present in a meeting with participants outside your organization, the Protection skill is invoked automatically.
• The Protection skill uses AI to check the meeting transcript for signs of suspected social-engineering attempts.
• If a suspected attempt is detected, users will receive a warning.
• Users will have options to end the meeting or temporarily restrict information sharing.
• No action is required to enable the Protection skill.

[Action required and recommendations]

No action is required to enable the Protection skill.

We recommend that you:

• Inform users that they may receive warnings about suspected social-engineering attempts during meetings with external participants.
• Help users understand the available options if a warning appears.
• Review the Facilitator documentation to familiarize yourself with the feature.

[Compliance considerations]

This change introduces an AI capability that interacts with customer data. When Facilitator is present, the Protection skill uses AI to check the meeting transcript for signs of suspected social-engineering attempts.