Is Telegram Safe? Encryption, Data and Scams
Is Telegram safe? What it encrypts, when it may share your IP address and phone number, what no app can protect, the settings to turn on, and how to spot scams.
Telegram can be safe for everyday chats if you set it up well. Every chat is encrypted, and secret chats add end-to-end encryption so only you and the other person can read them. Normal chats are stored encrypted in Telegram's cloud. Telegram's privacy policy also says it "may disclose your IP address and phone number" to authorities on a valid court order against a criminal suspect. Telegram itself warns it can't protect an unlocked phone, and most of its safety advice is about scams and settings.
We read Telegram's FAQ on security, data requests and scams, and section 8.3 of its privacy policy, on October 24, 2026.
About 27,100 people search "is telegram safe" each month, and 18,100 search "telegram scams."
What does Telegram encrypt?
| What Telegram says | |
|---|---|
| Cloud chats (private and groups) | Server-client encryption, stored encrypted in Telegram's cloud |
| Secret chats | End-to-end encryption on top, on two devices only, with self-destruct timers |
| The building blocks | 256-bit AES and 2048-bit RSA encryption, with a Diffie-Hellman key exchange |
| Calls | End-to-end encrypted, with key pictures to compare |
Telegram FAQ and Telegram's technical FAQ, read October 24, 2026.
Secret chats are the private option. Telegram says they "leave no trace on our servers" and "don't allow forwarding." Our guide to Telegram secret chats explains how to start one and check its key.
Does Telegram share your data?
Telegram makes two claims about its cloud. First, data is "stored in multiple data centers around the globe that are controlled by different legal entities spread across different jurisdictions," with the decryption keys "split into parts." Second, "To this day, we have disclosed 0 bytes of user messages to third parties, including governments."
Its privacy policy sets one clear exception for other data. Section 8.3 says that if Telegram "receives a valid order from the relevant judicial authorities that confirms you're a suspect in a case involving criminal activities that violate the Telegram Terms of Service," it will review the request and "may disclose your IP address and phone number." Any such sharing goes into "a quarterly transparency report."
Telegram also takes down "illegal public content (e.g., sticker sets, bots, groups and channels)" when it's reported.
What can't Telegram protect you from?
Your own phone. Telegram puts it bluntly: "we cannot protect you from your own mother if she takes your unlocked phone without a passcode." The same goes for a work computer your IT team can access, or anyone with physical access to your devices.
For sensitive talks, Telegram's advice is to use "only Secret Chats in official or at least verifiable open-source apps," ideally with a self-destruct timer.
How do you make Telegram more secure?
Telegram recommends these settings, all in Settings, then Privacy and Security:
- Turn on 2-Step Verification. Then "you will need both an SMS code and a password to log in."
- Add a recovery email, and protect that email well too.
- Set an app passcode, so an unlocked phone doesn't open Telegram.
- Check your sessions under Settings, then Devices, and end any you don't know.
You can also hide your phone number from people you don't know. Our guide to hiding your phone number on Telegram shows how.
Using Telegram on a computer? Our Telegram Web guide covers logging out of a browser you've left signed in.
What are the common Telegram scams?
Most scams try to get your login code or pretend to be someone you trust. Telegram's FAQ gives the rules that stop them:
- Never share your login code. Codes for your Telegram account come from "the verified service notifications chat named 'Telegram'" and "should never be shared with anyone." Anyone asking for it is trying to take your account.
- Know the official account. Telegram's own chat has "a verified profile with a blue check."
- Ignore codes you didn't ask for. Codes from other apps land in a "Verification Codes" chat. If you didn't request one, "simply tap on it and select 'Report'."
- Report impersonators. "If a scammer is pretending to be you, please contact @NoToScam."
Be wary of strangers who message you first with an offer, a prize or a job.
Frequently asked questions
Is Telegram safe to use?
For everyday chats, yes, with 2-Step Verification and a passcode turned on. Use secret chats for sensitive conversations.
Is Telegram end-to-end encrypted?
Secret chats and calls are. Normal cloud chats use server-client encryption and are stored encrypted in Telegram's cloud.
Does Telegram share my data with the police?
Telegram says it has disclosed 0 bytes of messages. Its privacy policy says it may share a suspect's IP address and phone number on a valid court order, and it reports those cases quarterly.
What are common Telegram scams?
People asking for your login code, fake accounts posing as Telegram or as people you know, and strangers with offers you didn't ask for.
Someone asked for my Telegram code. What do I do?
Don't send it. Telegram says your login code should never be shared with anyone. Turn on 2-Step Verification and check your sessions.
How do I make my Telegram more secure?
Turn on 2-Step Verification and a passcode in Settings, then Privacy and Security, and end sessions you don't recognize.
Hclout sells Telegram members and post views on its Telegram page, so weigh our advice the way you'd weigh any seller's.
Sources
- Telegram FAQ (telegram.org/faq): security, encryption, data requests, take-down requests, "Can Telegram protect me against everything?", 2-Step Verification, verification and login codes, impersonation, read October 24, 2026
- Telegram Privacy Policy (telegram.org/privacy), section 8.3, read October 24, 2026
- Telegram technical FAQ (core.telegram.org/techfaq), read October 24, 2026
- Google Ads Keyword Planner, worldwide, read October 24, 2026
Want the growth without the research?
Real accounts, 30-day refill, no password ever asked for.