1. News
  2. Alerts
  3. Telegram · Scam alert
AlertTelegram · Scam alert2 min read

Fake voting links are stealing Telegram accounts from friends' chats

Police in Uzbekistan say fake voting links sent by hacked friends are taking over Telegram accounts, then used to ask contacts for money.

By the Dashline deskSource: Zamin.uz
Fake voting links are stealing Telegram accounts from friends' chats
Photo: Dennis Cortés cortes, CC0
Act this week
What happenedPolice in Uzbekistan warn that fake contest and voting links are spreading on Telegram and taking over accounts, often to ask the owner's contacts for money.
Who is affectedTelegram users, especially people who get messages from friends or relatives asking them to vote in a contest.
What to do
  1. 1Do not open voting, gift or prize links, even from family. Call the sender first.
  2. 2Never type your Telegram login code into any website or tell it to anyone.
  3. 3Turn on Two-Step Verification: Settings, Privacy and Security, Two-Step Verification.
  4. 4If you were tricked, go to Settings, Devices, end unknown sessions, then warn your contacts by phone.

A message from a friend asks you to vote for their niece in a contest. The link looks harmless. Police in Uzbekistan say it is a trap, and cases of Telegram accounts being stolen this way have risen sharply. The Cybersecurity Center of the Ministry of Internal Affairs and the Tashkent City Department of Internal Affairs have issued a warning.

Why it is hard to spot

The messages do not come from strangers. They come from people you know, such as a friend or relative, whose accounts were already taken over. Typical lines include a request to vote for a child or grandmother, or a note that the family is entering a best mother or best grandmother contest. Because the sender is real, the request feels safe.

How the trick works

The link opens a fake page that copies the look of Telegram. It says it needs to check your vote, and asks for your phone number and the 5-digit login code Telegram sends you. Once you type that code in, the scammers get into your account.

  • They sign in from another device.
  • They log you out of all your own devices.
  • They message your contacts in your name, or ask your loved ones to send money to a card.

Who it affects

Any Telegram user can be hit, especially anyone who gets a voting, gift or prize link from someone they trust. The damage often spreads past the first victim, since every stolen account is used to reach family and friends. People who have already turned on Two-Step Verification have an extra layer. It adds a password, so a stolen code alone should not open the account.

What to do

The steps are in the alert box above. The main idea is simple: a login code is private, and no contest needs it. If a link arrives from someone you know, call them before you tap. If you already entered your code, act fast and warn your contacts by phone, because messages sent from your account will look like they come from you.

What is not known

The warning does not say how many accounts have been stolen. It also does not say how the first accounts were taken, or whether the same scheme is spreading outside Uzbekistan. The authorities ask citizens to follow basic digital hygiene and to warn the people close to them.

The takeaway

Never type a Telegram login code into a website, and call a friend before opening any voting link they send.

More articles

You should really read these.

Next step

Let’s talk