A friend recently encountered an account using the Telegram logo and name to impersonate support. The message claimed the platform had restricted the account and demanded a verification step. The screenshot below was shared by my friend and was not edited.
How the trap works
The button or link leads to a bot or a convincing imitation of a Telegram login page. If you provide a login code or approve a new session there, the attacker may obtain account access and use it to send spam or steal transferable assets.
Opening a Mini App does not automatically give it your phone number. A site may observe your IP address, while sharing a phone number or granting a login authorization involves separate permissions. The original post overstated what a bot learns simply from being opened.
Check the sender and the request
A familiar logo, account name, or emoji checkmark proves nothing. Telegram's actual verification badges help identify some official channels and services, but verification also exists for organizations and bots. A badge by itself does not establish that a message is from Telegram support.
Never give a login code to an unexpected private message or a support bot. Open the official app directly to review active sessions and enable two-step verification. If you already approved a suspicious session, terminate it promptly.
Beware of fake app updates
Some scammers ask users to install an unfamiliar Telegram client through an unsolicited link. A malicious app can abuse account access and any camera, photo, microphone, or contact permissions you grant. Download from official sources and be cautious about clients you cannot verify.
I reported the scam bots mentioned in the original post. See Telegram's official account-security guidance for more information.
Adapted from the original Chinese article, published on June 17, 2026.
Comments NOTHING