In this article
When your account is signed in somewhere new, Telegram sends you a message saying so: the device, roughly where, and when. It arrives on every device you already have.
It is the only security event you are told about as it happens, which is why it is also the one criminals imitate most.
What you will be able to do
- check_circle Read a login alert and know what it means.
- check_circle Act correctly in the minute after one arrives.
- check_circle Tell a genuine alert from an imitation.
- check_circle Stop the same thing happening again.
The alert arrives in the official Telegram service chat, the one with the verified badge.
notification_important A real alert tells, it never asks
The genuine message comes from Telegram's own service chat — the verified one at the top of your list, the same place your login codes arrive. It states what happened and leaves you to decide. It does not contain a link to tap, it does not ask you to confirm anything, and it never asks for a code.
Fraud runs the other way round. A message arrives from some ordinary account, dressed up as a security warning, and every version of it needs something from you: click here to verify, send us the code, reply to keep your account. That request is the tell, and it is reliable regardless of how convincing the wording is.
The correct response to a suspicious alert is never to interact with the message. Open Settings and look at the device list yourself. What is really signed in is there, and nothing in a message can change it.
Four situations
Most alerts are the first one and need nothing from you.
done_all The ordinary case
gpp_bad Move immediately
report How to spot it
verified_user Making it not happen again
A real alert tells you something. Anything that asks you for something is not from Telegram.
settings When one arrives
- Read it rather than dismissing it Device, place, time.
- Check that it is the verified service chat Anywhere else is not Telegram.
- If it was you, do nothing That is the whole of it.
- If it was not, terminate that session Before anything else.
- Turn on two-step verification This is the change that ends the problem.
- Never send a login code to anybody For any reason, ever.
This page is the alert that arrives. The curriculum step is the list behind it: auditing every device signed in, what each one can read, setting sessions to expire, and cleaning up after a shared or borrowed computer.
At a glance
- 1Login alerts
Telegram tells you when a new device signs in.
- 2Act fast
If it was not you, end the session in Devices.
- 3Spot fakes
Real alerts never ask you to click a link or send a code.
Updated
