Tengrinews.kz – The Prosecutor General’s Office has warned about a new scheme for hacking Telegram accounts. The supervisory authority explained how to protect your account and avoid becoming a victim of fraudsters, citing the press service of the Prosecutor General’s Office.
According to foreign sources, attackers are sending users fake messages allegedly on behalf of Telegram’s official support service. The messages say that a request has been submitted to delete the account, and that to cancel it, the user must urgently click a special button.
“As a rule, fraudsters put time limit on the user, saying that the deletion can only be canceled within 24 hours. They also warn that after the specified period expires, the account, correspondence, files and contacts will be permanently deleted,” the Prosecutor General’s Office said.
In fact, this scheme is based on psychological pressure: the attackers rely on the user’s fear of losing access to their account and force them to act in a hurry.
After clicking the button, the user is redirected to a Telegram bot or a fake website, where they are asked to enter a confirmation code from an SMS or messenger notification.
“In reality, there is no procedure for canceling account deletion. By entering the code, the user gives fraudsters access to their account themselves. It is important to remember: Telegram’s official support service does not ask users for confirmation codes, passwords or other login details through third-party bots or suspicious links,” the supervisory authority warned.
Once fraudsters gain control of an account, they can read correspondence, access personal data, send messages on behalf of the owner, contact their contacts with requests to transfer money, and use the account for further fraudulent attacks.
The Prosecutor General’s Office named the main signs of a fraudulent message:
- the sender claims to be support service but does not have official verified status;
- the message demands that the user urgently follow a link or use a bot;
- the user is asked to enter a confirmation code from SMS or Telegram;
- the message creates a sense of urgency and the threat of losing the account;
- the sender’s account was created recently, has changed its name or has suspicious signs;
- the text contains unusual wording, mistakes or suspicious links.
To protect your account, it is recommended to:
- never share confirmation codes or passwords with anyone;
- not follow links from suspicious messages;
- not enter Telegram data on third-party websites or in bots;
- enable two-step verification in the app settings;
- regularly check active sessions in the “Devices” section;
- terminate unknown or suspicious connections;
- get information only through official Telegram settings and channels.
“Fraudsters rely on fear and haste. Stay calm: a few minutes of checking can protect you from losing your account, personal data and possible harm to your relatives and acquaintances,” the Prosecutor General’s Office added.
