Microsoft Purview: Sender email address update for Microsoft Teams Data Loss Prevention Generate Incident Report emails

Microsoft is updating the sender email address for Teams Data Loss Prevention Generate Incident Report emails. Starting June 2, 2025, emails will come from either the old or new address, switching fully to no-reply@teams.mail.microsoft.com by June 20, 2025. Organizations should adjust related systems accordingly.

Updated September 4, 2025: We have updated the timeline. Thank you for your patience.

We're making changes to the sender email addresses by which admins receive Teams Data Loss Prevention (DLP) Generate Incident Report (GIR) emails.

[When this will happen:]

This rollout will start on December 30, 2025 (previously August 20) and complete by January 30, 2025 (previously August 30).

[How this will affect your organization:]

You are receiving this message because our reporting indicates one or more users in your organization may be using this GIR email functionality available with Teams DLP.

Currently, Teams DLP GIR emails are sent out via <no-reply-MicrosoftInformationProtectionOnline@microsoft.com>.Starting June 2nd 2025 (for a period of 2 weeks), you will receive GIR emails from either <no-reply-MicrosoftInformationProtectionOnline@microsoft.com> or <no-reply@teams.mail.microsoft.com>. After June 20th 2025, all Teams DLP GIR emails will be sent by the <no-reply@teams.mail.microsoft.com> email address.

[What you need to do to prepare:]

You will continue to receive Teams DLP GIR emails, but the sender email address will change. When this change takes effect, you will need to manage the downstream systems that you have configured (if any) by using the previous sender email address.

Learn more: Data loss prevention and Microsoft Teams.