TON Wallets in Telegram: Custodial or Self-Custody

warning The property everything else follows from

Transactions do not reverse. There is no chargeback, no dispute process, no support desk with the power to undo one, and no arbitration. A wrong address, a wrong amount, an approval you did not understand, a transfer to somebody who then stops replying — all final, within seconds, permanently.

Everything that follows on this page is a consequence. The care taken over a recovery phrase, the habit of reading an approval screen, the suspicion of anybody who contacts you first: none of it is paranoia. It is the only available compensation for a system with no undo, in a place where the rest of your life — a card payment, a bank transfer, an app store purchase — has one.

The practical form of that is simple and worth adopting before anything else. Send a small amount first. Any new address, any new counterparty, any first use of a new app: move a trivial sum, confirm it arrived, then move the rest. It costs a few minutes and it is the single habit that prevents the most common irreversible mistake, which is not fraud at all but a mistyped or wrongly pasted address.

account_balance_wallet Three positions, and the one most people should be in

The choice is usually presented as two — somebody else holds your keys, or you do. There is a third, it is legitimate, and it is where the majority of Telegram users sensibly sit.

The first row is a real answer. If your involvement is buying something in a mini app, supporting a channel or paying for a subscription, the ordinary balance covers it without any of this. People arrive at a wallet because a screen asked them to, not because they needed one, and a wallet opened for one transaction is a wallet nobody is looking after.

Between the middle rows, notice that the trade is symmetrical and is usually described as though it were not. Somebody else holding the keys means somebody else can freeze it — and also means there is somebody to write to when you make a mistake. Holding your own keys removes that company entirely, including the part of it that helps you.

key The recovery phrase is the wallet

A self-custody wallet is generated from a list of ordinary words. Those words are not a password protecting the wallet — they are it. Anyone who reads them can recreate the wallet on their own device and empty it, from anywhere, without needing your phone, your Telegram account or your permission.

Which produces one rule that covers almost every theft in this area. Nobody legitimate ever asks for it. Not support, not a wallet's own staff, not a mini app, not a verification step, not a giveaway, not a "migration", not a "security check". There is no situation in which typing those words anywhere other than into your own wallet's recovery screen is correct. If you hold that rule absolutely, you do not need to be able to spot a sophisticated fake, which is the point — it is a rule you can apply while tired.

Storage follows from the same fact. Words held in a photograph, a note application, a message to yourself or a cloud document are words held wherever that service is, and a compromised account elsewhere becomes a compromised wallet here. Written on paper, in more than one place, is unglamorous and is what the people who have not lost anything do.

fact_check Connecting, approving, and what each one means

Two different prompts appear regularly and people treat them as the same thing.

Connecting links your wallet to an application so it can see the address and ask you for things. By itself it does not move anything. It does tell that application which wallet you are, which is a small privacy fact worth noticing: a public address has a public history.

Approving is the one that matters. An approval screen shows what is about to happen — where it goes and how much — and pressing it is the irreversible act. Read the amount and the destination on that screen rather than on the page that produced it. The application wrote everything you saw a second ago; the approval is the last point at which anything independent is shown to you.

Where an approval grants a standing permission rather than a single transfer, that is a different and larger thing: you are allowing an application to act again later without asking. Where a wallet lets you review and revoke what you have connected, that list is worth reading occasionally in the same spirit as the sessions list from Step 028.

touch_app Try it now — five minutes

Four steps. The first two apply even if you decide the answer is the top row of the table.

1. Decide which row you are in, deliberately Most people have never chosen; they have a wallet because a screen produced one. Choosing is the exercise.
2. Say the rule out loud Nobody legitimate asks for the recovery phrase. It is worth more than any amount of vigilance because it needs none.
3. If you hold one: check where the phrase actually is If the answer is a photograph, a note or a message, move it to paper today. This is the most common real failure.
4. Send yourself a trivial amount First to a new address, then the rest. Make the small test transfer a reflex before it needs to be a lesson.

token Tokens, and why the name on a coin proves nothing

Alongside the network's own currency, anyone can issue a token on it. Some are well known and issued by substantial organisations; others were created in an afternoon by somebody with a plan for you.

The property to understand is that a token's name, symbol and logo are chosen by whoever made it, and nothing verifies them. A token calling itself by a familiar name is not that thing, and the appearance of one in your wallet is not evidence of anything — unsolicited tokens can simply be sent to any address, often carrying a name or a message designed to get you to interact with them. The correct response to something you did not acquire is to leave it alone.

The same goes for anything presented as a collectible. Step 090 covers the marketplace where usernames and numbers are traded, and the rule that applies there applies here: the price on a screen is somebody's asking price, not a value, and the transaction that moves it is as irreversible as every other transaction on this page.

Two practical consequences worth carrying. Moving anything costs a small network fee in the network's own currency, which means a wallet holding only tokens and none of that currency can be stuck. And a public address has a public history — anyone you give it to can see what else it has done, which is worth a thought before using the same address for a channel payout and for anything personal.

help Common questions at this stage