In this article
- call Two routes for the same encrypted audio
- rule Two different settings on the same screen
- verified_user The four emoji, and what they prove
- gpp_bad Calls from people you do not know
- touch_app Try it now — five minutes
- video_camera_front Video adds a second thing to check
- help Common questions at this stage
- At a glance
Telegram calls are encrypted end to end, and that part is not in question. What this step is about is the route the encrypted audio takes, because there are two and they differ in something that has nothing to do with encryption.
On the direct route, the person you are speaking to can work out roughly where you are. That is a setting, it is not obvious, and for most people it is set the wrong way.
What you will be able to do after this step
- check_circle Choose the routing setting, and say what each option costs.
- check_circle Separate that question from the one about who may call you at all.
- check_circle Use the four emoji to confirm nobody is between you.
- check_circle Handle a call from a stranger without giving anything away.
call Two routes for the same encrypted audio
A voice or video call has to move a continuous stream between two devices. Telegram can do that in two ways, and which one is used depends on a setting rather than on conditions.
Directly, device to device. It is the shortest path, which is good for the call — slightly less delay, slightly fewer things to go wrong. It also means each device connects to the other's network address, and a network address is roughly a location: a city, an internet provider, sometimes a workplace.
Through Telegram's servers, which relay the encrypted stream. Neither device learns anything about the other's connection, because neither one is talking to it. The audio is still end-to-end encrypted, so the relay is passing material it cannot read.
That is the whole of the trade: a small amount of call quality against whether the other party can infer where you are. For a call with your mother it does not matter. For a call with somebody you met in a group ten minutes ago, it is the entire question.
Direct, or relayed?
The cost of the safer option is smaller than people expect, and the cost of the other one is invisible until it matters.
alt_route Direct connection
public Relayed through Telegram
My Contacts is the setting that costs nothing and closes the gap. Never is right if you would rather not think about who is in your contacts.
rule Two different settings on the same screen
They sit next to each other and people change the wrong one, so it is worth separating them clearly.
Who can call me decides whether the phone rings at all. Closing it to My Contacts removes cold calls entirely, which is the more common annoyance and the more obvious fix.
Peer-to-peer decides the route once a call is connected. It only matters for calls that happen, which is why the two settings are complementary rather than alternatives: the first reduces how often the question arises, the second decides what happens when it does.
The combination worth having is both at My Contacts. Strangers cannot ring you, and if you do end up on a call with somebody outside your contacts — through a group, or because you added them for one conversation — the route is the relayed one by default.
verified_user The four emoji, and what they prove
During a call, both people are shown four emoji derived from the key their devices agreed. If you and the other person see the same four, no third party inserted themselves into the exchange.
Checking takes five seconds: say yours aloud and have them confirm. It has to be done in the call itself — comparing screenshots afterwards, or over a chat, defeats the purpose, since that is a different channel that could be the compromised one.
Be precise about what a match establishes. It says the encryption is between the two devices and nothing sat in the middle. It does not say who is holding the other device, whether they are recording, or what they will repeat later. It is the same boundary Step 025 drew for Secret Chats, in a different form — and those use a key image rather than emoji, which is worth knowing so the two are not confused.
For almost every call this is unnecessary, and that is a fine reason not to do it. It exists for the small number of conversations where you would want to be certain, and the point of knowing about it is being able to use it on the day one of those happens.
gpp_bad Calls from people you do not know
An incoming call is the most effective pressure device on this platform, and that makes it the preferred tool for a particular kind of fraud. The pattern is consistent: somebody claiming to be from a bank, an exchange, a delivery company or a support desk, asking you to act now.
The defence has nothing to do with encryption and everything to do with a habit. Hang up and contact the organisation yourself, through a number or an address you already had. Nobody legitimate is harmed by that and every impostor is stopped by it.
Three specific things never to do on a call you did not initiate: read out a code that arrived by message, install anything, or share your screen. The last one is worth naming because it sounds harmless — Step 068 covers screen sharing, and the short version is that no genuine support process needs to watch your banking session.
And if the call was unexpected at all, the routing setting is doing its job in the background: with peer-to-peer at My Contacts, answering a stranger's call gives away nothing about where you are, which removes one consequence from a moment where you are already off balance.
touch_app Try it now — five minutes
Two settings, one habit and one rehearsal.
- Open Privacy and Security, then Calls Set who can call you to My Contacts. This is the change you will actually notice, because it removes cold calls.
- On the same screen, set peer-to-peer to My Contacts It is a separate line and easy to miss. This is the one that closes the location question for calls with people you do not know.
- Make one call and look at the four emoji Find them in the corner of the call screen. Knowing where they are is the whole preparation; you will not be hunting for them on the day it matters.
- Decide your rule for unexpected calls now Decline, ask in writing, and call back on a number you already had. Deciding in advance is what makes it work under pressure.
video_camera_front Video adds a second thing to check
Everything above applies to voice and video equally. Turning the camera on adds a question the settings cannot answer: what is behind you, and who else is in the room.
The frame shows more than you think at the moment you accept a call — a whiteboard, a screen, paperwork on the desk, a window that says which building you are in, somebody walking past who did not agree to be on a call. None of that is a privacy setting; it is a two-second look before you enable the camera.
One behaviour is worth knowing because it surprises people: minimising the call or switching to another app does not switch the camera off. The stream continues while you go and find the document you were asked for, and whatever the camera is pointing at goes with it. If you need to leave the frame, turn the camera off rather than relying on the app being in the background.
And the same question applies to the audio: a call takes in the room, not just your voice. That is the reason the safest place to take an unexpected call is not the room where other people are talking.
help Common questions at this stage
Will relaying make my calls noticeably worse?
Rarely. The stream takes one extra hop, which adds a small amount of delay — enough to measure and generally not enough to hear. On a genuinely bad connection the direct route can be a little more robust, which is the honest case for it. If you find a particular call poor, switching the setting temporarily is a reasonable experiment; setting it back afterwards is the part people forget.
Does this apply to group voice chats too?
Group calls are relayed through Telegram by their nature, since a room of participants cannot all connect to each other directly. So the peer-to-peer setting is about one-to-one calls. Group voice chats have their own considerations, covered in Step 068 — and the encryption picture there is different again, which Step 025's note about verification touches on.
Can the other person tell which route we are using?
Not in any way the app shows them, and it is not a negotiation — if either side's setting calls for a relay, the relay is used. That is deliberate: a privacy setting that could be overridden by the other party would not be one. So there is nothing to explain and nothing to agree; your setting protects you regardless of theirs.
Is my number visible to somebody who calls me?
That is governed by the phone number settings from Step 009, not by anything here, and the two are independent: you can be unreachable by number and still take a call from somebody who found you by username. It is worth checking both, because people often close one and assume the other followed.
What actually is an address able to tell somebody?
Usually a city and an internet provider — occasionally an organisation, if you are on a corporate or university network. Not a street, and not a name. It is more than nothing and less than people fear. The reason to close it is not that it identifies you precisely but that it is a piece of information handed to a stranger for no reason, and closing it is free.
Should I be worried about calls I have already taken?
Almost certainly not. The overwhelming majority of calls are with people who already know roughly where you live. Change the setting, and if a specific past call worries you, the useful response is the one that applies to any stranger: block the account and, if it was fraudulent, report it. Reporting and blocking matter more in practice than retroactive worry about a network address.
At a glance
- 1Peer-to-peer or relay
Direct calls can reveal your rough location; relayed calls do not.
- 2Who can call
A separate setting decides who can call you at all; My Contacts is safe.
- 3Check the emoji
Read the four emoji aloud to confirm nobody is in between.
Updated