Sometimes Microsoft Teams blocks a message and calls it "unsafe" or "dangerous," even though the message is fine. This is called a false positive. Now Microsoft has some new capability to allow users to report false positives. Here is what it will do:
1. Teams Admin Center - Messaging settings
Enable “Report incorrect security detections.”
2. Microsoft Defender portal - Settings - User reported settings
Ensure Teams message reporting is enabled.
If both steps are not done, the feature will not work appropriately.
- Clicking on a message in Teams will let you select, "Report this message."
- Then you will need to choose, "Not a security concern if you believe it was blocked erroneously."
- This feature will work on Windows, Mac, Web, iPhone, and Android.
- It is available to organizations that have Microsoft Defender for Office 365 Plan 2 or Microsoft Defender XDR.
- It needs to be enabled by your admin in Teams Admin Center and Defender portal interfaces.
- Microsoft is planning to have this available by end of November 2025 for everyone.
What does this help with?
People run into issues at times when a normal link files is just blocked for no reason. This new feature will:- Save time
- Reduce frustration
- Help Microsoft improve their threat detection
- Lead to fewer mistakes in the future
How to enable (for admins)
Admins will need to enable the feature in two locations:1. Teams Admin Center - Messaging settings
Enable “Report incorrect security detections.”
2. Microsoft Defender portal - Settings - User reported settings
Ensure Teams message reporting is enabled.
If both steps are not done, the feature will not work appropriately.
Are there any limitations?
- Some users may report genuine dangerous messages as “safe”, so admins will have to assess the reporting judiciously
- Some government organizations may not have this feature yet
