Cyberpolice explain how to regain access to Telegram and protect data from fraudsters

The Cyberpolice of Ukraine has published a step-by-step algorithm for protecting a Telegram account. These recommendations are relevant if you have noticed a loss of access to the messenger, unknown sessions, or messages you did not send. Such signs may indicate that the account has been taken over by fraudsters who use other people's profiles to defraud people of money, spread dangerous links, and obtain personal data.

How criminals operate

Fraudsters may disguise themselves as official chatbots or the Telegram support service. They create phishing pages through which they attempt to obtain a phone number, authorisation code, and other login data. After taking over the profile, criminals write to your acquaintances, ask to borrow money, and send malicious files. Information from correspondence is also at risk, as it becomes accessible to third parties.

Actions if you still have access to Telegram

The first step is to check active sessions. Open the "Settings" → "Devices" section and terminate unknown connections. You can use the option to terminate all other sessions at once.

Next, you need to set up two-step verification. Set a separate, strong password and add a secure email address for its recovery. Ensure that the specified address belongs to you. This additional password makes it harder for third parties to log in, even if a criminal has the authorisation code.

What to do if you cannot log in

Try to authorise through the official application using a phone number that you control. If the service has imposed a limit on repeated attempts, wait until the specified period ends.

Also, contact official Telegram support. Describe the problem and specify the phone number associated with the account in international format. The appeal does not guarantee immediate restoration of access.

Protecting contacts and data

Warn your acquaintances through other communication channels: messages in your name may be sent by third parties. Ask them not to transfer money, not to open files, and not to click on suspicious links.

If passwords were stored in chats, change them in the respective services. Ask your correspondents to delete sensitive messages for both parties, but note: this will not destroy copies that criminals may have saved earlier.

Account deletion and reporting the crime

Deleting an account is an irreversible step, not a universal way to recover it. According to Telegram's rules, the standard procedure requires confirmation through the account. Moreover, deleting a profile does not automatically remove all copies of messages in correspondents' devices.

You can report fraud through the cyberpolice form. More recommendations on protection against scams are available on the website of the "FraudGoodbye" campaign.

Previously, cases were recorded where fraudsters hacked Telegram using a bait in the form of a request to vote for a child. Messages asking to support a contest participant led to a dangerous link. There is also a known scheme involving fake promo codes for free fuel: on fake pages, users were asked to enter a phone number and confirmation code, after which criminals gained access to the profile.