Favorite your Message Center and Roadmap items. Access them anytime via your Profile. Export and share with your team or your LLM.

(Updated) Microsoft Teams: External domains anomalies report

Message ID
MC1219794
View in Message Center
Service
Microsoft Teams
Category
Stay Informed
Tags
New featureUser impactAdmin impact
Rollout
April 2026
Roadmap ID
536572
View in M365 Roadmap
Platform
Web

Summary

Microsoft Teams will roll out the External domains anomalies report by mid-April 2026, helping admins detect unusual external communication. Available in the Teams admin center, it highlights abnormal activity and offers a block option. Admins can enable alerts for proactive notifications; no action is needed to access the report.

Details

Updated February 27, 2026: We have updated the timeline. Thank you for your patience. 

[Introduction]

To help admins detect unusual or potentially risky interactions with external organizations, Microsoft Teams is introducing the External domains anomalies report. This report analyzes cross-tenant communication patterns for your tenant and highlights sudden spikes or abnormal engagement activity. These insights support proactive investigation and help protect your organization while enabling secure external collaboration.

This message is associated with Microsoft 365 Roadmap ID 536572.

[When this will happen]

  • General Availability (Worldwide): Rolling out in early April 2026 (previously early March) and expected to complete in mid-April 2026 (previously mid-March).

[How this affects your organization]

Who is affected:

  • Teams administrators can view this report for their Microsoft 365 tenant if their organization collaborates with external organizations.

What will happen:

  • A new External domains anomalies report will be available in the Microsoft Teams admin center under Protection reports.
  • Admins can select Communication anomalies, choose a date range, and run the report to view results:
  • Insights include external domains with unusual communication activity:
    • External domain name
    • Total anomalies detected
    • New 1:1 threads created by that domain
    • New group threads created by that domain
  • A Block option is available directly in the report for managing external domains:
  • user settings

[What you can do to prepare]

No action is required to access the report.

To receive proactive alerts:

  • Enable External domains anomalies alerts in the Teams admin center:
    • Go to Notifications & alerts > Rules.
    • Select External domains anomalies.
    • Set status to Active.
  • Specify a Teams channel for notifications if desired.
  • user settings

  • Daily alerts will summarize the top five domains with unusual activity.
  • user settings

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

Change History

Show
February 27, 2026 at 6:30 PM Updated
Summary
Previous
Microsoft Teams will roll out the External domains anomalies report by mid-March 2026, helping admins detect unusual external communication. Available in the Teams admin center, it highlights abnormal activity and offers a block option. Admins can enable alerts for proactive notifications; no action is needed to access the report.
New
Microsoft Teams will roll out the External domains anomalies report by mid-April 2026, helping admins detect unusual external communication. Available in the Teams admin center, it highlights abnormal activity and offers a block option. Admins can enable alerts for proactive notifications; no action is needed to access the report.
Last Updated Date
Previous
2026-01-29T23:00:36.733Z
New
2026-02-27T17:11:33.890Z
Body Content
Previous

Updated January 29, 2026: We have updated the timeline. Thank you for your patience. 

[Introduction]

To help admins detect unusual or potentially risky interactions with external organizations, Microsoft Teams is introducing the External domains anomalies report. This report analyzes cross-tenant communication patterns for your tenant and highlights sudden spikes or abnormal engagement activity. These insights support proactive investigation and help protect your organization while enabling secure external collaboration.

This message is associated with Microsoft 365 Roadmap ID 536572.

[When this will happen]

  • General Availability (Worldwide): Rolling out in early March 2026 (previously late February) and expected to complete in mid-March 2026.

[How this affects your organization]

Who is affected:

  • Teams administrators can view this report for their Microsoft 365 tenant if their organization collaborates with external organizations.

What will happen:

  • A new External domains anomalies report will be available in the Microsoft Teams admin center under Protection reports.
  • Admins can select Communication anomalies, choose a date range, and run the report to view results:
  • Insights include external domains with unusual communication activity:
    • External domain name
    • Total anomalies detected
    • New 1:1 threads created by that domain
    • New group threads created by that domain
  • A Block option is available directly in the report for managing external domains:
  • user settings

[What you can do to prepare]

No action is required to access the report.

To receive proactive alerts:

  • Enable External domains anomalies alerts in the Teams admin center:
    • Go to Notifications & alerts > Rules.
    • Select External domains anomalies.
    • Set status to Active.
  • Specify a Teams channel for notifications if desired.
  • user settings

  • Daily alerts will summarize the top five domains with unusual activity.
  • user settings

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

New

Updated February 27, 2026: We have updated the timeline. Thank you for your patience. 

[Introduction]

To help admins detect unusual or potentially risky interactions with external organizations, Microsoft Teams is introducing the External domains anomalies report. This report analyzes cross-tenant communication patterns for your tenant and highlights sudden spikes or abnormal engagement activity. These insights support proactive investigation and help protect your organization while enabling secure external collaboration.

This message is associated with Microsoft 365 Roadmap ID 536572.

[When this will happen]

  • General Availability (Worldwide): Rolling out in early April 2026 (previously early March) and expected to complete in mid-April 2026 (previously mid-March).

[How this affects your organization]

Who is affected:

  • Teams administrators can view this report for their Microsoft 365 tenant if their organization collaborates with external organizations.

What will happen:

  • A new External domains anomalies report will be available in the Microsoft Teams admin center under Protection reports.
  • Admins can select Communication anomalies, choose a date range, and run the report to view results:
  • Insights include external domains with unusual communication activity:
    • External domain name
    • Total anomalies detected
    • New 1:1 threads created by that domain
    • New group threads created by that domain
  • A Block option is available directly in the report for managing external domains:
  • user settings

[What you can do to prepare]

No action is required to access the report.

To receive proactive alerts:

  • Enable External domains anomalies alerts in the Teams admin center:
    • Go to Notifications & alerts > Rules.
    • Select External domains anomalies.
    • Set status to Active.
  • Specify a Teams channel for notifications if desired.
  • user settings

  • Daily alerts will summarize the top five domains with unusual activity.
  • user settings

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

January 30, 2026 at 2:30 AM Updated
Summary
Previous
Microsoft Teams will roll out an External domains anomalies report by March 2026, helping admins detect unusual external communication. Available in the Teams admin center, it highlights abnormal activity and offers a block option. Admins can enable alerts for proactive notifications; no action is needed to access the report.
New
Microsoft Teams will roll out the External domains anomalies report by mid-March 2026, helping admins detect unusual external communication. Available in the Teams admin center, it highlights abnormal activity and offers a block option. Admins can enable alerts for proactive notifications; no action is needed to access the report.
Last Updated Date
Previous
2026-01-29T17:35:47.933Z
New
2026-01-29T23:00:36.733Z
Body Content
Previous

Updated January 29, 2026: We have updated the content. Thank you for your patience. 

[Introduction]

To help admins detect unusual or potentially risky interactions with external organizations, Microsoft Teams is introducing the External domains anomalies report. This report analyzes cross-tenant communication patterns for your tenant and highlights sudden spikes or abnormal engagement activity. These insights support proactive investigation and help protect your organization while enabling secure external collaboration.

This message is associated with Microsoft 365 Roadmap ID 536572.

[When this will happen]

  • General Availability (Worldwide): Rolling out in late February 2026 and expected to complete in March 2026.

[How this affects your organization]

Who is affected:

  • Teams administrators can view this report for their Microsoft 365 tenant if their organization collaborates with external organizations.

What will happen:

  • A new External domains anomalies report will be available in the Microsoft Teams admin center under Protection reports.
  • Admins can select Communication anomalies, choose a date range, and run the report to view results:
  • Insights include external domains with unusual communication activity:
    • External domain name
    • Total anomalies detected
    • New 1:1 threads created by that domain
    • New group threads created by that domain
  • A Block option is available directly in the report for managing external domains:
  • user settings

[What you can do to prepare]

No action is required to access the report.

To receive proactive alerts:

  • Enable External domains anomalies alerts in the Teams admin center:
    • Go to Notifications & alerts > Rules.
    • Select External domains anomalies.
    • Set status to Active.
  • Specify a Teams channel for notifications if desired.
  • user settings

  • Daily alerts will summarize the top five domains with unusual activity.
  • user settings

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

New

Updated January 29, 2026: We have updated the timeline. Thank you for your patience. 

[Introduction]

To help admins detect unusual or potentially risky interactions with external organizations, Microsoft Teams is introducing the External domains anomalies report. This report analyzes cross-tenant communication patterns for your tenant and highlights sudden spikes or abnormal engagement activity. These insights support proactive investigation and help protect your organization while enabling secure external collaboration.

This message is associated with Microsoft 365 Roadmap ID 536572.

[When this will happen]

  • General Availability (Worldwide): Rolling out in early March 2026 (previously late February) and expected to complete in mid-March 2026.

[How this affects your organization]

Who is affected:

  • Teams administrators can view this report for their Microsoft 365 tenant if their organization collaborates with external organizations.

What will happen:

  • A new External domains anomalies report will be available in the Microsoft Teams admin center under Protection reports.
  • Admins can select Communication anomalies, choose a date range, and run the report to view results:
  • Insights include external domains with unusual communication activity:
    • External domain name
    • Total anomalies detected
    • New 1:1 threads created by that domain
    • New group threads created by that domain
  • A Block option is available directly in the report for managing external domains:
  • user settings

[What you can do to prepare]

No action is required to access the report.

To receive proactive alerts:

  • Enable External domains anomalies alerts in the Teams admin center:
    • Go to Notifications & alerts > Rules.
    • Select External domains anomalies.
    • Set status to Active.
  • Specify a Teams channel for notifications if desired.
  • user settings

  • Daily alerts will summarize the top five domains with unusual activity.
  • user settings

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

January 29, 2026 at 6:30 PM Updated
Title
Previous
Microsoft Teams: External domains anomalies report
New
(Updated) Microsoft Teams: External domains anomalies report
Summary
Previous
Microsoft Teams will roll out an External domains anomalies report by March 2026, enabling admins to detect unusual external communication patterns. Available in the Teams admin center, it provides insights and blocking options for suspicious domains. Admins can enable alerts for proactive monitoring without required action to access the report.
New
Microsoft Teams will roll out an External domains anomalies report by March 2026, helping admins detect unusual external communication. Available in the Teams admin center, it highlights abnormal activity and offers a block option. Admins can enable alerts for proactive notifications; no action is needed to access the report.
Last Updated Date
Previous
2026-01-21T00:39:30.817Z
New
2026-01-29T17:35:47.933Z
Tags
Previous
New feature,User impact,Admin impact
New
Updated message,New feature,User impact,Admin impact
Body Content
Previous

[Introduction]

To help admins detect unusual or potentially risky interactions with external organizations, Microsoft Teams is introducing the External domains anomalies report. This report analyzes cross-tenant communication patterns for your tenant and highlights sudden spikes or abnormal engagement activity. These insights support proactive investigation and help protect your organization while enabling secure external collaboration.

This message is associated with Microsoft 365 Roadmap ID 536572.

[When this will happen]

  • General Availability (Worldwide): Rolling out in late February 2026 and expected to complete in March 2026.

[How this affects your organization]

Who is affected:

  • Teams administrators can view this report for their Microsoft 365 tenant if their organization collaborates with external organizations.

What will happen:

  • A new External domains anomalies report will be available in the Microsoft Teams admin center under Protection reports.
  • Admins can select Communication anomalies, choose a date range, and run the report to view results:
  • Insights include external domains with unusual communication activity:
    • External domain name
    • Total anomalies detected
    • New 1:1 chat threads created by that domain
    • New group chat threads created by that domain
  • A Block option is available directly in the report for managing external domains:
  • user settings

[What you can do to prepare]

No action is required to access the report.

To receive proactive alerts:

  • Enable External domains anomalies alerts in the Teams admin center:
    • Go to Notifications & alerts > Rules.
    • Select External domains anomalies.
    • Set status to Active.
  • Specify a Teams channel for notifications if desired.
  • user settings

  • Daily alerts will summarize the top five domains with unusual activity.
  • user settings

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

New

Updated January 29, 2026: We have updated the content. Thank you for your patience. 

[Introduction]

To help admins detect unusual or potentially risky interactions with external organizations, Microsoft Teams is introducing the External domains anomalies report. This report analyzes cross-tenant communication patterns for your tenant and highlights sudden spikes or abnormal engagement activity. These insights support proactive investigation and help protect your organization while enabling secure external collaboration.

This message is associated with Microsoft 365 Roadmap ID 536572.

[When this will happen]

  • General Availability (Worldwide): Rolling out in late February 2026 and expected to complete in March 2026.

[How this affects your organization]

Who is affected:

  • Teams administrators can view this report for their Microsoft 365 tenant if their organization collaborates with external organizations.

What will happen:

  • A new External domains anomalies report will be available in the Microsoft Teams admin center under Protection reports.
  • Admins can select Communication anomalies, choose a date range, and run the report to view results:
  • Insights include external domains with unusual communication activity:
    • External domain name
    • Total anomalies detected
    • New 1:1 threads created by that domain
    • New group threads created by that domain
  • A Block option is available directly in the report for managing external domains:
  • user settings

[What you can do to prepare]

No action is required to access the report.

To receive proactive alerts:

  • Enable External domains anomalies alerts in the Teams admin center:
    • Go to Notifications & alerts > Rules.
    • Select External domains anomalies.
    • Set status to Active.
  • Specify a Teams channel for notifications if desired.
  • user settings

  • Daily alerts will summarize the top five domains with unusual activity.
  • user settings

[Compliance considerations]

No compliance considerations identified. Review as appropriate for your organization.

Never Miss a Microsoft 365 Update

Join thousands of IT professionals who rely on DeltaPulse for real-time Microsoft 365 change intelligence, automated notifications, and community insights.