9 Telegram scams and how to protect yourself in 2026

Why do scammers use Telegram?

Scammers flock to Telegram because some of its features are easy to exploit. The main reasons include:

• Easy account creation and anonymity features. You can create a Telegram account using only a phone number. If you adjust your privacy settings, no one can see your phone number, and only your contacts can use it to add you. You can then connect with other users using a custom username. Telegram also offers Secret Chats with disappearing messages and allows you to delete entire chat histories for both users.
• Large group capacity. Telegram groups can host up to 200,000 members. This massive capacity allows scams to spread quickly to large audiences.
• Bots and automation. Users can create bots that harvest data, send phishing links, impersonate admins, or simulate customer support. These automated tools allow Telegram bot scams to scale with minimal effort.
• Encrypted chats. Telegram scammers misuse end-to-end encrypted Secret Chats to hide their activity. Regular cloud chats are encrypted in transit and on servers but aren’t end-to-end encrypted.
• Cryptocurrency community presence. A high concentration of cryptocurrency traders on the app attracts investment scams.
• Cross-border jurisdiction. Telegram is not a US company, which means legal processes follow different jurisdictions and procedures. This international framework makes it harder for law enforcement agencies to investigate and prosecute scammers.
• Fast file sharing. Links and files move quickly through chats and channels. Scammers exploit this speed to deliver malware using malicious attachments.

9 types of scams on Telegram

Most Telegram app scams rely on phishing and impersonation to steal your data or money. These schemes often begin on dating apps, social media, forums, gaming platforms, or online marketplaces before fraudsters move the conversation to Telegram to bypass these platforms’ security filters.

Once there, the different types of fraud often overlap. Telegram scammers use similar pressure tactics and irreversible payment methods no matter the scam. For example, a simple tech support message can evolve into a complex investment trap.

To stay safer on the app, familiarize yourself with the nine most common Telegram scams and how they work.

1. Online marketplace scams

Scammers use Telegram to defraud buyers and sellers. Fraudsters often target users on classified ad sites like Craigslist, Facebook Marketplace, or Gumtree. To bypass the marketplace’s security filters, the fraudster insists on moving the conversation to Telegram.

Scams also happen directly inside the app. Criminals target people in Telegram marketplaces and resale groups or run fake storefront channels to sell nonexistent products or services. For example, NordVPN and Saily researchers found that criminals run “buy-for-you” operations on the platform. These fraudsters use stolen payment card details to book services, such as flights, hotels, and rentals. They then resell these bookings to Telegram users at steep discounts.

Purchase scams are very common. According to a 2025 Revolut report, these schemes account for nearly 57% of all reported authorised push payment (APP) fraud. And while Meta-owned platforms remain the largest source of APP fraud, Revolut reported a surge in fraudulent activity on Telegram.¹

In fake seller scams, fraudsters list high-demand items like gaming consoles or smartphones at low prices. During the transaction, they pressure you to use non-reversible payment methods. These payment methods include cryptocurrency, bank transfers, or “friends and family” options on payment apps like PayPal. After you pay, the seller disappears without delivering the item.

A major red flag during these transactions is a seller who refuses to use secure payment methods or escrow. Escrow is a trust tool where a third party holds the buyer’s funds and releases the payment only after the item is delivered. Fake sellers avoid these protections because they want to steal your money immediately.

In a fake buyer scam, a fraudster pretends to purchase an item you listed for sale. They send a forged email or a manipulated screenshot. This fake image looks like a legitimate payment confirmation from a bank or payment app. The scammer claims the money is “pending” or “on hold” until you provide a tracking number. In reality, they sent no money.

2. Job scams

Fraudsters often pose as recruiters to run Telegram job scams. They offer high-paying jobs with flexible hours and claim that no experience is needed. The Revolut report notes that Telegram alone now accounts for over 58% of all job scams.¹

Fake recruiters contact targets directly through direct messages (DMs) or posts in public groups. To build credibility, they falsely claim to represent well-known companies like Shein, TikTok, or IMDb.

A popular variation is the task scam. Scammers ask you to like TikTok posts, write movie reviews on IMDb, or boost products for online retailers. They promise earnings of hundreds of dollars a day for just a few minutes of work.

To build trust, these fake employers often pay a small initial sum, such as $5 to $20. Once you believe the job is real, they ask you to deposit money or pay a fee. They claim this payment will unlock higher-paying tasks or allow you to withdraw your earnings. You never get that money back.

These employment scams also harvest your personal data. During the application process, scammers ask you to provide your name, email address, phone number, and government‑issued ID details. They use this sensitive information for identity theft or to target you in future scams.

3. Investment scams

Telegram is a major hub for fraudulent investment schemes, particularly involving cryptocurrency. According to the Revolut report mentioned earlier, almost 10% of all reported fraud is investment scams. Messaging apps serve as the primary channel for these crimes. Together, Telegram and WhatsApp host 60% of these cases.¹

To execute these schemes, fraudsters create fake groups and pose as financial experts with insider knowledge. They promise massive returns with little effort and rely on the fear of missing out (FOMO) to rush your decision. Once you invest, the criminals use fake market data or simulated dashboards to display false profits.

Common variations include:

• Pump-and-dump schemes. In this Telegram crypto scam, fraudsters artificially inflate the price of an obscure cryptocurrency by promoting it heavily in large groups. Once targets invest and the price peaks, the scammers sell (“dump”) their holdings. The subsequent sell-off causes the cryptocurrency’s value to crash, and investors are left with worthless coins.
• HYIPs. High-yield investment programs (HYIPs) operate as Ponzi schemes. Scammers promise massive returns to early investors. They pay these initial profits using money collected from new targets. This tactic creates an illusion of success before the criminals disappear with the remaining funds.
• Fake ICOs. Fraudsters invent nonexistent initial coin offerings (ICOs) to steal upfront investments. Because the promised projects and tokens are fake, investors lose their money and receive nothing in return.
• Fake trading signals. Scammers sell expensive trading advice. They claim these insider tips guarantee market profits. In reality, the advice provides no financial value.

4. Tech support scams and fake admins

Fraudsters run tech support scams by posing as Telegram staff or group administrators. They contact you and claim your account has a problem, such as suspicious activity or a security breach. They use fake security alerts to make you panic and act quickly.

To fix the supposed issue, scammers send harmful links or malware-embedded documents disguised as legitimate files. They also pressure targets to download fake Telegram apps that steal personal data.

In other cases, criminals send shortened URLs that lead to fake login pages. Once you enter your details, scammers can intercept your two-factor authentication (2FA) codes or hijack your session. This access gives them full control over your Telegram account, which leads to another type of fraud — account takeover.

Fraudsters also impersonate administrators to charge fees for fake private groups or channels. They claim these spaces offer special content or benefits.

To join, you must pay a membership fee, which is often a one-time payment or a recurring subscription that is difficult to cancel. Once you send the money, the scammers vanish or add you to an empty dummy group.

5. Romance and friend-in-need scams

Telegram romance scams often start on dating apps. A scammer creates a fake profile and selects a target. After building a connection, the fraudster convinces the target to move the conversation to Telegram. These cruel online dating scams can last for months or even years.

Eventually, the scammer invents an emergency and asks for financial help. For example, they claim they need a plane ticket to visit the target or money to pay medical bills. Once the target sends the funds, the scammer cancels the plans or disappears entirely.

Friend-in-need scams work similarly but rely on impersonation rather than emotional manipulation. Fraudsters copy the name and photo of a target’s friend or family member to create a fake Telegram profile. They contact the target and claim to have an emergency, such as a lost phone or a stolen wallet.

6. Fake prizes and giveaways

Telegram scammers impersonate celebrities, big brands, or cryptocurrency exchanges to run fake giveaways. They claim you won a prize, such as a new iPhone, cash, or cryptocurrency.

To release the reward, the fraudsters demand a shipping or processing fee. In reality, the prize doesn’t exist, and the scammer keeps your money and personal details.

In the cryptocurrency space, this giveaway fraud often appears as a fake airdrop. Scammers promise free tokens if you complete specific tasks or connect your cryptocurrency wallet to their website. They often ask you to send a small amount of cryptocurrency first to verify your address.

7. Fake bot surveys

Some scammers program malicious Telegram bots to run fake surveys, quizzes, and competitions. These bots promise exclusive prizes to lure people. In reality, the bots exist solely to harvest their personal information.

To participate, the bot asks you for sensitive personal information, such as your email address, phone number, or date of birth. Scammers gather these details to build a profile for identity theft or targeted phishing attacks. They also sell this information to other cybercriminals.

Another common trick involves fake verification bots. These data-harvesting bots claim you must verify your identity to join a specific Telegram group or channel. They direct you to a phishing site or ask you to input your credit card details for age verification.

Be careful because these bot-generated links often lead to subscription traps. Scammers use the website’s fine print to conceal costly monthly services. If you submit your payment details, the scammers can apply recurring charges to your phone bill or bank statement.

8. Charity and fundraiser scams

Scammers create fake channels and groups that mimic prominent charities during humanitarian crises or natural disasters. These fraudulent Telegram accounts may use the exact profile pictures, logos, and pinned posts of legitimate organizations. Slight differences in the username, such as the added use of “support” or “official,” often expose the deception.

Inside these groups, scammers post emotional appeals about disaster relief or sick children. They use these stories to pressure users into donating. Real charities offer multiple payment methods. These fraudsters, instead, often demand cryptocurrency, such as Bitcoin or USDT.  Once the scammers collect the funds, they delete the channel and disappear.

9. Extortion scams

Extortion scams using Telegram usually begin as romance fraud or data theft. In the romance variation, scammers build a relationship to gain your trust. They then convince you to share intimate photos or videos. Once they receive this sensitive media, the scammers threaten to leak it to your friends, family, or employer. They demand a ransom to keep the files private.

Data breach extortion works differently. Scammers claim they hacked your device and recorded you through your webcam. They include an old password found in a public leak to ensure the threat seems real. Finally, they demand a cryptocurrency payment to delete the fabricated evidence.

How to identify a scammer on Telegram

Most Telegram fraudsters use fake profiles to deceive users. While some of these accounts look convincing, they often display warning signs. Watch for the following red flags to protect your account and personal information:

• They contact you first. Scammers often send direct messages that contain suspicious links, phishing attempts, or malware. Genuine companies, recruiters, or support staff rarely contact you first.

• They use new or low‑activity profiles. Fraudsters often rely on recently created accounts. These profiles usually have no mutual contacts, minimal activity, and generic or AI-generated photos.

• They create a false sense of urgency. Scammers pressure you to act quickly. They use emotional triggers, such as romantic affection, pity stories, or fake emergencies, to force immediate action.

• They refuse to verify their identity. They avoid video or voice calls. They claim their camera is broken to avoid proving who they are.

• They mimic usernames and skip verification. Scammers impersonate real organizations by slightly altering usernames — adding a dash, an underscore, or an extra letter. These fake profiles also lack verified account badges.

• They send robotic or scripted replies. Automated Telegram bots or scam farms reply instantly and ignore context. They continually push links instead of engaging in a real conversation.

• They share suspicious links or files. Fraudsters often send shortened URLs, external download prompts, or attachments disguised as legitimate documents. These malicious links and files lead to phishing sites or install malware.

• They demand secrecy. Scammers insist that you move conversations into private messages or “VIP” groups, discouraging public discussion or accountability.

• They promise unrealistic rewards. Offers such as guaranteed jobs, massive investment returns, or free prizes often indicate fraud.

• They insist on untraceable payments. Fraudsters prefer cryptocurrency, wire transfers, or gift cards because once you complete the transaction, recovering your funds is difficult or impossible.

What to do if you’ve been scammed on Telegram

Telegram scams become more sophisticated every year, which makes them difficult to recognize and avoid. If a scammer targets you, take immediate action to limit financial loss and secure your data.

• Document the incident. Save screenshots of the chat, usernames, user IDs, transaction hashes, and payment receipts.
• Secure your accounts. Change your email account and Telegram passwords. In the Telegram app, go to “Settings” > “Devices” to terminate active sessions from unknown devices.
• Contact your financial institution. If a scammer steals your banking details, call your bank. Ask the representative to freeze your card and monitor your account for fraudulent activity. If you used a digital payment system, contact the provider to see if it can reverse the transaction. If you paid through gift cards, report the fraud to the issuing company, although recovery is rare in these cases.
• Alert your contacts. Warn your friends and family that your account has been compromised.
• Protect your cryptocurrency. If you connected your wallet to a malicious smart contract, revoke all token approvals immediately. Move your remaining funds to a new, secure wallet.
• File a police report. Contact local law enforcement and provide your documented evidence to support the investigation.

How to report someone on Telegram

Always report phishing scams and fraudulent accounts to help take them down:

• Use in-app reporting. Open the user profile, channel, or message. Tap the three-dot menu and select “Report.” Choose a reason, such as “Spam” or “Fake account,” and add relevant details.
• Message the anti-scam bot. Forward fraudulent messages, profiles, or channel links to the official @notoscam bot.
• Email Telegram support. Send evidence of phishing and fraud, including screenshots and links, to abuse@telegram.org.
• Notify cryptocurrency exchanges. If you sent cryptocurrency to a scammer, report the destination wallet address to major exchanges like Binance or Coinbase. These platforms can freeze the funds if the scammer tries to cash out.
• Report to national authorities. In the US, file a complaint with the FTC at reportfraud.ftc.gov and the FBI Internet Crime Complaint Center at ic3.gov. Outside the US, report the incident to your national cybercrime agency.

How to protect yourself from Telegram scams

Cybercriminals frequently target messaging apps. Follow these tips to stay safer on Telegram and other messaging platforms:

• Use 2FA. Two-factor authentication adds a required password or code when you log in from a new device. This security layer makes it harder for scammers to hijack your account.
• Create strong passwords. Use complex and unique passwords for your email account and devices. A strong password helps prevent unauthorized access.
• Adjust your privacy settings. Go to “Settings”> “Privacy and security” in the Telegram app. Hide your phone number and profile photo from strangers. Restrict group invitations so only your contacts can add you to new channels.
• Update your software. Keep the Telegram app and your device’s operating system updated. Software updates patch security vulnerabilities that hackers exploit.
• Protect sensitive information. Never share passwords, 2FA codes, cryptocurrency seed phrases, or payment data in Telegram chats.
• Use a VPN. A virtual private network encrypts your data and changes your IP address to improve your online privacy. Premium services like NordVPN offer features such as Threat Protection, which blocks malicious domains and helps prevent phishing attacks. A VPN for Telegram also allows you to access the app securely if it’s restricted in your region.
• Verify profiles before interacting. If someone you don’t know messages you, ask for a quick video call to confirm they are a real person and match their profile. If a supposed friend unexpectedly asks for money, contact them through a different platform or call them directly to confirm the request is real.
• Ignore unsolicited messages. Avoid clicking links or downloading files from unknown accounts. If you receive a suspicious link, scan it with an online link checker before opening it.
• Reject implausible offers. Investment scams often promise massive profits with zero risk. If an investment opportunity sounds too good to be true, it’s a scam.
• Use an identity theft protection service. Services like NordProtect monitor the dark web for your personal data. These tools alert you if your information is exposed in a data breach, which allows you to secure your accounts before scammers exploit them.
• Avoid third-party Telegram apps. Download Telegram only from the official Google Play Store, App Store, or the official website. Unofficial or modified versions of the Telegram app may contain malware designed to steal your data.

Disclaimer: NordVPN and NordProtect have been developed by related entities, both part of the same corporate group. Other trademarks referenced are for illustrative purposes only. NordVPN is not affiliated with, sponsored by, or endorsed by the owners of those trademarks.

References 

¹ Revolut Group Holdings Ltd. (2025). Consumer Security and Financial Crime Report FY 2025. Revolut. https://assets.revolut.com/pdf/Revolut_Consumer_Security_and_FinCrime_Report_compressed.pdf