Telegram has gradually gained popularity over the course of the last decade and has become firmly established as one of the world’s most popular messaging apps, with over 900 million monthly users. Especially favored by the cryptocurrency community, it has a strong focus on privacy, with end-to-end encryption applied to calls made through the app, which is multi-functional.
However, serious concerns have arisen that Telegram scams are on the rise and targeting people from all walks of life, all over the world. Research from Kaspersky Digital Footprint Intelligence found that in May and June 2024, the volume of posts on the platform discussing Telegram app scams or other types of Telegram fraud had risen by 53% compared to the same period in 2023.
This means it’s never been more important to understand how Telegram works, what Telegram is used for, and how to protect yourself against Telegram fraud. This guide tells you all you need to know.
What is Telegram?
Telegram is a multi-faceted communication app in which users can send end-to-end messages, participate in group conversations, make voice and video calls, and even exchange files. All messages and documents sent in Telegram are stored on a secure cloud-based server, which makes it easier for other people around the world to receive and interact with them.
Telegram is also based around username accounts, rather than using phone numbers, which theoretically improves privacy for people using the platform. As a further privacy measure, calls and the ‘secret chat’ feature are subject to end-to-end encryption - however, this doesn’t apply to other types of messages, chats, and calls, as it has on rival messaging app WhatsApp for several years.
Why do scammers use Telegram?
Telegram is an easy app to get up and running on, and it’s similarly easy to set up or join group conversations and communities. This makes it fertile ground for would-be criminals to contact people, build audiences - entirely anonymously - and identify potential targets for criminal activity online.
With such low barriers for entry, a strong cybercriminal community has developed on Telegram, where different attackers can share information and insights on different activities and pool their skills and resources. This can include (and is by no means limited to) discussing fraud schemes, distributing leaked databases, trading forged documents, and executing distributed denial of service (DDoS) attacks to order.
Is Telegram safe to use?
Yes, if the right security precautions are taken. As with virtually any online activity, understanding the potential risks and taking proactive steps to mitigate those risks is a vital part of staying safe. Using the ‘secret chat’ feature to ensure that messages are encrypted end-to-end is a good place to start, but keeping abreast of various Telegram app scams and practical preventative measures is also important.
Types of Telegram scams
As Telegram has grown, so has the range of scams that have gained traction and found success among unsuspecting users. If you intend to use Telegram, especially on a regular basis, you should keep an eye out for the following:
1. Romance and “friend in need” scams
Telegram gives many scammers the perfect opportunity to set up a romantic relationship or pose as a friend in dire financial circumstances and receive money from someone who falls for the emotional sob story. Sometimes, the scammer will disappear after receiving one payment, and in other cases, they will extort money for months or even years: either way, the financial damage from these romance scams is limitless.
2. Fake tech support
As for many sites, tech support scams are common. Some cybercriminals have been pretending to be members of Telegram’s technical support team to gain access to a victim’s account or other pieces of personal data. The scammer will generally ask the victim to provide that data as a way of fixing an issue (which is usually made up) or will claim that they need remote access to the account. Tech support making the first move to contact the user is a major red flag.
3. Fake profiles, admins and bots
The above tactic is also applied by scammers who pretend to be official Telegram administrators, who will normally claim that there are problems with user’s accounts that they require access details to resolve. Bots can also be used to gain that data in the same way. This risk exists alongside the general issue of fake profiles; the username-based system means people aren’t always who they say they are.
4. Phishing on Telegram
Phishing scams have regularly affected Telegram users, especially as scammers have been able to use the bot feature within the app to trick users into giving away sensitive information. Several phishing links have also been known to send users to spoof websites, where they enter personal data for seemingly legitimate purposes, only to find that it’s then sent to scammers.
5. Harmful links and attachments
Connected to the previous point, the ease of file-sharing within Telegram means that malicious files or links can easily be shared and disguised as legitimate material. Direct messages are the most common method of sharing them, and they will normally lead to malware being installed onto a device, either for stealing data or demanding a ransom from the victim in exchange for having their device restored.
6. Telegram investment scams and Ponzi schemes
The popularity of Telegram within the crypto and investment community means that false investment ‘opportunities’ are commonplace. Fraudsters will carefully design exciting investment schemes that usually guarantee the victim very large profits in a very short space of time, or with very little work involved. The criminal will take the money to allegedly invest on the victims’ behalf and disappear; it has also been known for bank details to be seized, too. For example, in India, one medical student was scammed out of more than 4.4 million rupees (approx. £40,000, $50,000) in this way.
7. Surveys and competitions
Gambling-related scams, marketing surveys and competitions that offer people incentives in exchange for some personal data are common and legal. However, there have been cases of such schemes being set up on Telegram by criminals as a way of stealing customer data and either using it for their own ends or selling it to other malicious parties.
8. Telegram job scams
Recruitment ads that advertise fake jobs are also common among Telegram app scams. Typically, a Telegram job scam will run along similar principles to investment frauds, offering extremely attractive rates of pay or other favorable conditions such as highly flexible working hours. Responding to these ads and pursuing the position can allow the scammer to gain highly sensitive data - especially if the victim submits their resume.
9. Crypto “pump and dump” scams
An especially common tactic among cryptocurrency fraudsters on Telegram is to “pump and dump” a particular coin. This works by fraudsters claiming a coin in which they have holdings is a good investment and/or using fake profiles to drum up interest in a coin or claim to have some inside information. This drives up the value of the coin as more people buy in, allowing the scammers to sell at an artificially inflated price while the victims are left with crypto of minimal value after the subsequent collapse.
10. Fake classified ads
Fake adverts that lead users to malicious sites are a habitual hazard across the digital world, and Telegram is certainly no exception. Alongside the risk of stealing personal information, these adverts can easily lead to malware being installed on a device, including browser hijackers that can make it even easier for unwitting victims to send data to cybercriminals.
How to protect yourself from Telegram scams
If you think you’ve become the victim of any Telegram scams, you should report and block the people involved and get in touch with your bank and payment provider immediately to halt any transfers and alert them to the situation.
However, by taking a range of proactive, preventative measures, you can minimize the risk of ending up in such a situation in the first place:
Report a Telegram scammer
It’s essential that you report any activity on Telegram that you suspect is criminal or fraudulent. Even if you’ve already been the subject of a successful Telegram app scam, flagging up the behavior can help the Telegram admin and other authorities act, and reduce the chances of other people being similarly affected in the future. Telegram has a specific anti-scammer channel - @notoscam - where this behavior can be reported.
Use two-factor authentication (2FA)
Applying two layers of authentication to your online accounts outside Telegram means that would-be scammers need to get hold of more of your data to gain access, making things more difficult for them. While it might take longer to gain access each time, it adds greater certainty that nobody else will be able to.
Strengthen your passwords
Alongside 2FA, strong passwords that are unlikely to be used by other people can act as a good defense, as it makes it less likely that fraudsters will be able to guess their way in. As an extra measure, these passwords should be updated regularly and stored safely using a password manager, while the password for Telegram should not be reused for other platforms, websites, or applications.
Verify the identities of everyone you interact with
If you are unsure of someone’s identity or fear you may be interacting with a fake profile, some simple investigation work can help you get some clarity. For example, you could look for other means of contacting the same person (such as other social media platforms) to see if things match up across both channels. Additionally, romance scammers tend to refuse video calls because they would uncover their real identities, so trying to make one can help flush them out.
Remember that “if it sounds too good to be true, it probably is”
From the job of your dreams to the investment that will be like winning the lottery, it’s vital not to get sucked in by big promises made by Telegram users you don’t know. Any claims or offers of this nature should be investigated thoroughly before proceeding, including checking out the credentials or track records of the people making the claim.
Use a Virtual Private Network (VPN)
A good Virtual Private Network such as Kaspersky VPN Secure Connection can mask IP addresses, enhancing privacy and security by preventing scammers from accessing it. This can also be useful in ensuring global access to Telegram, as some countries don’t allow it to be used.
Related Articles:
- The Biggest Crypto Exchange Hacks: How to Make Sure You Protect Your Crypto Against Hacks
- I’m a phishing victim! What do I do now?
- What Can Hackers Do With Your Email Address?
Related Products:
