Your Microsoft 365 Bill Went Up in July. Here Is What You Actually Got

On July 1, 2026, Microsoft raised the list price of Microsoft 365 Business Basic from $6 to $7 a user, and Business Standard from $12.50 to $14, both roughly a 12 to 16 percent jump. If you run a twenty-person company, that alone adds somewhere between €200 and €400 a year to your renewal, and if nobody in your business reads Microsoft's licensing announcements, it likely showed up on an invoice with no explanation attached.

Microsoft's own answer to "why" is that the increase funds a set of features being added to the same plans over the course of 2026, detailed in its December 2025 announcement and confirmed on the official Microsoft 365 licensing page. That is a fair trade in principle. Whether it is a fair trade for your business depends on whether those features actually reached your tenant, and for a meaningful number of businesses, in late August, they still have not.

What you are paying for, plan by plan

The one detail worth sitting with: Business Premium, the plan that already includes full Defender for Office 365 and costs more per seat, did not get more expensive. Basic and Standard, the plans without that protection, did. Microsoft is closing part of the security gap between its tiers, and billing the two cheaper tiers for it.

What "URL time-of-click protection" actually does

Ordinary link scanning checks a URL once, when the email lands in the inbox. A phishing site that is not live yet, or that only turns malicious a few hours after the email goes out, passes that check clean. Time-of-click protection checks the link again the moment someone actually clicks it, wherever they are, in Outlook or in Word, Excel and PowerPoint. Microsoft's own Defender for Office 365 documentation describes this as catching the exact attack pattern that plain inbox scanning misses: a link that was clean on Monday and weaponized by Wednesday, sitting untouched in someone's inbox in the meantime.

For a small business, that closes a real gap without asking anyone to change how they work. Nobody has to learn a new habit or squint at a link before clicking it. The scan happens invisibly, at the moment it matters, which is exactly the kind of control that Microsoft 365 management should include as a baseline rather than an optional extra.

Why some tenants have not seen it yet

Microsoft's own rollout notice, message center ID MC1304290, says the feature was expected to reach eligible tenants by August 1, 2026, but adds a separate line for Microsoft 365 Business SKUs specifically: backfill completion is now expected by September 30. In plain terms, if you are on Business Basic or Standard, the increase already hit your invoice in July, and the feature it is meant to fund may not land in your tenant until well into the autumn. That gap is not a billing error. It is a real, if awkward, sequencing decision, and it means checking your own tenant is the only way to know where you actually stand.

Copilot Chat's expanded inbox and calendar awareness follows a similar staged rollout, tenant by tenant, rather than a single switch-on date for every customer at once. None of this requires action from most businesses. It does mean that "we are paying more, so we must have it now" is not a safe assumption to run your compliance documentation on.

This is not a one-off, it is a pattern

Microsoft has adjusted commercial Microsoft 365 pricing more than once since introducing the New Commerce Experience in 2022, and our earlier piece on Microsoft 365 commercial price increases covers the currency and billing-model changes that already pushed DACH renewals up by 9 to 15 percent independent of anything covered here. What is different this time is the pairing: Microsoft is not just raising the price of the same product, it is bundling in a specific, named security feature and explaining the trade openly in advance, rather than letting the increase land as a surprise line item.

That is a better pattern than a bare price rise, but it still leaves the burden of verification on the customer. Microsoft's message center is not a channel most ten-person companies monitor, and a rollout window that spans July through September means the invoice and the feature can be months apart even for a business paying close attention. Expect this pairing, price change plus a named feature with its own rollout date, to keep happening as Microsoft folds more Defender and Copilot capability into its lower tiers. Treating each one as a one-time check rather than routine is how a business ends up months behind on what it is actually entitled to.

Working through the numbers for a real tenant

Take a fifteen-person company on Business Standard, paid monthly. At $12.50 a seat that was $187.50 a month; at $14 it is $210, a difference of $22.50 a month or roughly $270 a year, before currency conversion and VAT. Against that, the same company would have paid separately for a phishing-protection add-on to get time-of-click scanning before this update existed as a bundled feature, and that add-on typically cost more per seat than the entire price increase does. Framed that way, the increase is close to the cheapest way this protection was ever going to reach a Basic or Standard tenant.

The number that actually matters for your business is not the list price difference. It is whether the fifteen people on that tenant are clicking links that a scan at time of click would have caught, and whether anyone would know if it had not. That is a question worth answering with a look at your own mail flow and sign-in logs, not with an assumption based on what the invoice says you are supposed to have.

Is the increase actually worth it?

For most small businesses on Basic or Standard, yes, once the features land. Phishing protection that used to require a Defender for Office 365 add-on, at extra cost, is now bundled into a plan increase that is smaller than that add-on would have cost on its own. If your business was already weighing whether to move up to Business Premium purely for the security features, this update narrows that gap without you having to change plans at all.

The calculation looks different if your business handles regulated data, client contracts with named security requirements, or anything else where "we have URL time-of-click protection" needs to be a documented, verified fact rather than an assumption. In that case the rollout timeline above matters more than the price change does, and a proper Microsoft 365 security assessment can confirm exactly what is live in your tenant today, rather than what Microsoft's roadmap says should be live by a certain date.

It is also a reasonable moment to check whether you are even on the right plan to begin with. Businesses that moved to monthly billing for flexibility, or that never revisited licence counts after a round of hiring or departures, are often paying for more seats or a more expensive commitment type than they need, independent of this update. Our licence and cost review work catches that kind of drift alongside changes like this one.

A five-minute check for your own tenant

• Confirm your current plan and price in the Microsoft 365 admin center under Billing > Your products, and compare it against the table above.
• Send a test message with a delayed-activation link, or ask your IT provider to confirm URL time-of-click protection is active, rather than assuming the August 1 date applied to you.
• Check the Microsoft 365 message center for MC1304290 and any tenant-specific rollout note, since the exact activation date varies by tenant.
• Update your own documentation, if you keep any record of what security controls your business relies on, once the feature is confirmed active rather than merely announced.
• Revisit your plan choice if you are paying the Premium price purely for Defender features that Basic or Standard now partly cover.

Quick answers