Telegram has over 950 million active users, and its open group features, bot capabilities, and emphasis on privacy have made it a go-to platform for scammers worldwide. The FBI's Internet Crime Complaint Center has tracked a sharp rise in messaging-app fraud, and the FTC reports that social media and messaging platforms are now the top contact method for scam operations. Whether you are new to Telegram or use it daily, understanding the most common scam tactics can save you from losing money, personal data, or access to your accounts.

Why Scammers Love Telegram
Telegram offers several features that scammers exploit. Anyone can create groups and channels with thousands of members. Bots can automate interactions and even accept payments. Usernames can closely mimic real organizations with small, hard-to-notice differences. And unlike platforms with strict content moderation, Telegram has historically been slower to remove fraudulent accounts and channels.
⚠Never Share Your 2FA Codes
Telegram will never ask for your two-factor authentication code through a chat message. Anyone requesting this code is attempting to hijack your account, regardless of what username or profile picture they display.
The Most Common Telegram Scams
Fake Investment and Crypto Groups
This is the most widespread Telegram scam. Fraudsters create channels that mimic legitimate crypto projects or financial advisors, posting fabricated screenshots of massive returns. They often use a "guaranteed profits" narrative, claiming insider knowledge or exclusive token launches.
A common variation involves scammers announcing free token giveaways, then directing victims to a "KYC verification" bot that actually requests a cryptocurrency deposit. Once you send funds to the provided wallet address, the money is gone. The CFTC's consumer protection resources warn specifically about crypto giveaway scams on messaging platforms.
Impersonation Scams
Scammers create profiles that closely resemble real contacts, companies, or Telegram support staff. They alter usernames by adding a dash, underscore, or extra letter that is easy to overlook. These fake profiles typically lack the verified badge that legitimate organizations display.
Using information from data breaches, social media, or data brokers, impersonators may reference personal details to seem authentic. They then request money transfers, login credentials, or sensitive personal information.
Malicious Bots
Telegram bots can automate data harvesting and payment collection at scale. In one documented scheme, scammers persuade victims to interact with a bot, then rename it to "Telegram Wallet" or "Support Bot" to appear official. They may even transfer ownership of the bot to the victim's account and then report it to Telegram, causing the victim's account to be flagged.
Other malicious bots impersonate verification services, asking victims to enter phone numbers, email addresses, or financial details under the pretense of account security.
Romance and Pig Butchering Scams
Scammers initiate friendly conversations, often claiming to have messaged the wrong person. Over weeks or months, they build trust and emotional connection before steering the conversation toward cryptocurrency investments. This tactic is a hallmark of pig butchering scams, which have cost victims billions globally. They direct victims to fraudulent trading platforms that show fabricated profits, encouraging increasingly larger deposits until the victim's funds are drained.
Fake Job and Employment Offers
Fraudsters post attractive remote job listings in Telegram groups, requesting personal identification documents or upfront "training fees" before any legitimate work begins. These scams target job seekers with promises of high pay for minimal effort.
Charity and Donation Scams
Following natural disasters or humanitarian crises, scammers create Telegram channels soliciting donations. They post emotionally compelling photos and stories alongside cryptocurrency wallet addresses or payment links, with none of the funds reaching any actual cause. You can check suspicious crypto addresses against our Bitcoin scammer list to see if they have been reported before.
Think a website might be a scam?
Check any URL instantly with our free scam detection tools.
Red Flags to Watch For
Not every unsolicited message is a scam, but these warning signs should put you on alert:
- Unsolicited contact from strangers offering investment advice or business opportunities
- Urgency and pressure to act immediately before an "opportunity expires"
- Guaranteed returns on investments, which is always a sign of fraud
- Requests for cryptocurrency, gift cards, or wire transfers
- Slightly altered usernames that mimic known organizations or contacts
- Links to external websites for "verification" or "claiming rewards"
- Reluctance to video call or meet in person, especially in romance contexts
How to Protect Yourself
Tighten Your Privacy Settings
Navigate to Settings > Privacy & Security and configure:
- Phone Number: Set to "Nobody" so strangers cannot find you by number
- Groups & Channels: Limit to "My Contacts" to prevent being added to scam groups
- Last Seen: Hide from non-contacts
- People Nearby: Disable this feature if you do not use it
- Forwarded Messages: Set to "Nobody" to prevent your identity being shared when messages are forwarded
Enable Two-Step Verification
Go to Settings > Privacy & Security > Two-Step Verification and set a strong password plus a recovery email. This prevents account takeover even if a scammer obtains your SMS verification code.
Verify Before You Trust
Always confirm identities through an independent channel. If someone claiming to be a friend asks for money, call that friend directly. If a "support agent" contacts you, visit the official website instead of clicking any link they provide.
Never Send Money to Unverified Contacts
Legitimate organizations will never demand payment through Telegram messages. Be especially wary of cryptocurrency transactions, which are irreversible.
ℹLegitimate Organizations Do Not DM First
Real companies and crypto projects do not send unsolicited direct messages offering investment opportunities, airdrops, or account support. If you did not initiate the conversation, assume it is a scam.
What to Do If You Have Been Scammed
- Block the scammer immediately and stop all communication
- Report the account using Telegram's Report button, message @notoscam, or email abuse@telegram.org
- Secure your account by changing your password, enabling two-step verification, and reviewing active sessions under Settings > Devices
- Document everything with screenshots of conversations, usernames, and wallet addresses
- Report to authorities including the FTC and your local law enforcement. For crypto losses, also file with the FBI IC3
- Notify your bank if any financial information was shared
Related Resources
Scam TypesPig Butchering Scams
How Telegram is used to initiate the most costly crypto-romance fraud scheme in history.
Scam TypesRomance Scams
How scammers build fake relationships on messaging platforms to steal money.
Platform GuidesSignal App Scams
Similar fraud tactics on Signal and how encrypted messaging is exploited.
ToolsFree Scam Checker Tool
Paste a suspicious URL or crypto platform link to check for fraud indicators.
GuidesHow to Report a Crypto Scam
Step-by-step guide to reporting Telegram crypto fraud to authorities.
GuidesProtect Yourself from Phishing
How to recognize and avoid phishing links sent through messaging apps.
Telegram is a powerful communication tool, but its openness makes vigilance essential. By tightening your settings and staying skeptical of unsolicited contact, you can enjoy the platform without falling victim to fraud.