Microsoft Teams is about to make QR code phishing much harder
Microsoft Teams will obscure QR codes from external senders starting October 2026, adding friction against QR-code phishing across Android, desktop, iOS, and Mac.
Microsoft 365 Roadmap entry 570439 describes a Teams feature that obscures images containing QR codes sent by external users, requiring users to reveal them before viewing or scanning. Rollout is expected to begin in October 2026 for Android, desktop, iOS, and Mac. The feature aims to reduce QR code phishing risk, which NordVPN says has redirected more than 26 million users to malicious websites, with 73% of Americans scanning codes without verifying destinations.
How QR-code phishing can slip past corporate security measures
ESET explains how QR-code phishing (quishing) bypasses corporate security controls and offers guidance for defenders to close the gap.
ESET WeLiveSecurity published an analysis of quishing, describing QR-code phishing as an increasingly popular alternative to traditional phishing. Because QR codes push victims to scan and open links on personal devices, they often evade corporate email security gateways and URL inspection. The article outlines how businesses can close the resulting gap with appropriate security measures and user awareness.