Number Porting Scams on Telegram
Scammers use Telegram bots and fake carrier channels to harvest the account PINs and OTPs needed to port victims' mobile numbers without their consent.
Part of: Number Porting Scams
Last reviewed: 1 June 2026
Telegram's bot ecosystem and anonymous channel model make it a practical coordination tool for SIM-swap fraud rings. Attackers run Telegram bots that automate phishing lures and fake carrier verification flows, stripping account details from victims at scale.
Crypto users and people with valuable social media accounts are frequently targeted because their phone numbers gate high-value assets protected by SMS-based 2FA. Losing a number on Telegram can cascade into losing crypto wallets, exchange accounts, and financial apps within minutes.
How this scam works on Telegram
Attackers create Telegram channels with carrier-like branding and push 'urgent service notifications' to targeted users. A linked bot prompts victims to 'verify their number' by entering their carrier account PIN and forwarding a six-digit code that arrives by SMS — the code is actually an authorisation to port the number.
In other variants, attackers compromise existing Telegram accounts and use the victim's contact list to send trusted-looking messages linking to fake carrier portals. The social trust of a known sender dramatically increases click rates.
Some campaigns use Telegram to coordinate real-time SIM-swap operations, with one team member engaging the victim while another simultaneously calls the carrier's helpline.
Common red flags
- Telegram channel or bot claiming to be your carrier with no verified badge
- Bot asks you to enter your carrier account PIN directly into Telegram
- Request to forward an SMS code received from your carrier
- Message warns of immediate service termination unless you verify within minutes
- Channel was created recently with no prior activity or authentic posts
- Contact claiming to help you 'secure' your number requires your account credentials
How to protect yourself
- Never enter carrier credentials or forward carrier OTPs via Telegram
- Enable a port-freeze or number-lock directly with your carrier
- Replace SMS 2FA with hardware security keys or authenticator apps for critical accounts
- Enable Telegram's own two-step verification so your Telegram account cannot be taken even if your number is ported
- Contact your carrier directly if you receive any unexpected verification codes
- Review which accounts still use your phone number as a recovery method and update them
How to report it
- Report the channel or bot to Telegram via the 'Report' option in the channel/bot menu
- Contact your carrier fraud line immediately if you suspect a port attempt
- Report to your national cybercrime or telecoms regulator
Frequently asked questions
I run a Telegram channel with followers — am I at higher risk of a targeted port-out attack?
Possibly, especially if your phone number or crypto/social media activity is publicly linked to your Telegram presence. Attackers often target people with valuable accounts because a successful port can cascade into access to multiple linked services. Moving critical 2FA off SMS and onto an authenticator app or hardware key reduces this exposure significantly.
What is the fastest way to stop a port-out attempt already in progress?
Call your carrier's fraud line immediately — the number is usually on their official website or a previous bill, not in any message you received — and ask them to halt or reverse the port. Speed is critical, since a completed port can happen within hours.
Does Telegram's own two-step verification stop my number from being ported?
It protects your Telegram account specifically, so even if your number is ported, an attacker cannot register it on Telegram without your separate PIN. It does not, however, prevent the port itself — you still need a carrier-side PIN or port-freeze to stop that.
Why are Telegram users targeted for SIM swaps?
Many Telegram users hold cryptocurrency and high-value accounts where phone numbers serve as a recovery or 2FA method. Porting the number gives attackers a skeleton key to multiple accounts simultaneously.