The short answer
- 1A bot is a program made by an outside developer, not a person.
- 2It sees your name, username, photos and what you send it; not your number.
- 3Never give a bot your login code, password or bank details.
In this article
A bot is a program, not a person
A bot looks like any other chat in your list, with a name, a picture and a message box, but nobody is typing on the other side. Telegram's FAQ describes bots as small programs that run inside Telegram, made by outside developers using the Telegram Bot API. You send it a message or tap a button, and the developer's software answers.
That one fact decides how far to trust a bot. Its replies come from whoever wrote and runs it, and the FAQ says plainly that Telegram does not usually make bots itself. A few official ones exist for specific jobs, such as @gif and @Stickers, but the vast majority are third-party.
| Bots are good for | Examples |
|---|---|
| Quick lookups inside a chat | Finding a GIF, a sticker, a translation |
| Running groups | Welcoming members, filtering spam, polls |
| Alerts you subscribe to | News, price changes, shipping updates |
| Mini apps | Full apps with their own screens that open inside Telegram |
What a bot can and cannot see
The FAQ is specific about this. When you talk to a bot, it gets the same view of you that a stranger in a shared group would get, and nothing more.
| A bot can see | A bot cannot see |
|---|---|
| Your public name and @username | Your phone number, unless you share it yourself |
| Your profile pictures | Your last seen status |
| The messages you send to it | Your other chats |
The weak point is the left-hand column's last row. Anything you type to a bot goes to its developer's server, where Telegram's rules no longer reach. Treat what you send a bot as what you would hand to someone you have never met.
Spotting the real bot among lookalikes
Popular bots attract copies. Search for @SpamBot and the official Spam Info Bot comes first, but just below it are bots with nearly the same name, one even using the Telegram logo and a fake red unread counter as its picture.
- The official bot: blue verified badge and tens of millions of users
- Lookalikes: a near-identical name, a borrowed Telegram logo, a fake unread counter, no badge
- Check the exact @username. Lookalikes swap or add a letter, as in @spame_bot. Copy the username from the service's own website rather than typing it from memory.
- Look for the blue verified badge on bots that claim to be Telegram or a well-known company. Official Telegram bots carry it; a bot that only uses the Telegram logo as its picture does not.
- A big user count is a hint, not proof. It tells you a bot is popular, not that it is honest.
The same tricks are used on people's accounts; choosing a name and username explains why a username is easy to imitate.
Starting a bot
A bot cannot message you first. When you open a bot you have never used, Telegram shows its description in a What can this bot do? card and a Start button. The description is written by the developer, so read it as an advert, not a guarantee. Tapping Start sends the command /start, and from then on the bot can reply to you.
- Name, verified badge and monthly users
- What can this bot do? — the developer's own description, shown before you start
- /start — the first message; the bot can reply only after this
Many bots show a Menu button next to the message box with their commands. If you are unsure what a bot does, send /help; most developers answer it.
What never to give a bot
| A bot asks for | What it really means |
|---|---|
| Your Telegram login code, to "verify" you | An attempt to take over your account. Telegram's codes come only in the verified chat named Telegram and are for you alone |
| Your Two-Step Verification password | Same. No real service needs it |
| Your phone number, through a Share button | Your choice. Share it only if the bot genuinely needs it, such as a delivery service you trust |
| Card details typed into the chat | Never type them as a message. Real payments in Telegram open a separate payment form |
If you have already sent a login code to anyone, turn on Two-Step Verification right away and check your active sessions.
Bots in your groups
When a bot is added to a group, it works in one of two modes, and the group's member list shows which one. By default a bot sees only the messages meant for it, such as commands, and the member list says has no access to messages next to it. Some bots need more, so their developers turn this off; the list then says has access to messages, and the bot receives everything posted in the group.
Check that line before you add a bot to a group where people share anything private. The FAQ's advice is simple: if the group holds very sensitive information, leave out bots you do not trust completely. Making a bot an admin gives it more power again, so give it only the rights it needs.
Stopping, blocking and reporting a bot
A bot that keeps messaging you can be blocked like any person, after which it cannot write to you again. Many bots also have their own command to go quiet; check /help first.
- Mute — keep the bot but stop its notifications
- Report — flag a scam or impersonating bot
- Delete and Block — remove the chat and stop the bot from messaging you
| Device | Where to block it |
|---|---|
| Android | Open the bot chat, tap ⋮ at the top right, then Delete and Block. Report is just above it |
| iPhone | Tap the bot's name at the top, then Block Bot |
| Computer | Open the bot's profile and choose Stop and block bot |
Use Report for a bot that impersonates Telegram or a company, or that asks for codes and passwords. Changed your mind later? The same place offers Restart Bot.
Next step: why your phone number controls your Telegram account.
FAQ
Are Telegram bots safe?
A bot only sees your public name, username, profile pictures and the messages you send it. The risk is what you type to it, which goes to its developer's server.
Can a bot see my phone number?
No, unless you share it yourself, for example by tapping a button the bot shows that asks for your number.
Can a bot in my group read all messages?
Only if its developer turned off privacy mode. The group's member list shows has access to messages or has no access to messages next to the bot.
How do I stop a bot from messaging me?
Block it like any user. On Android open the bot chat, tap the menu and choose Delete and Block.
Sources
At a glance
- 1Bots are programs
Made by third-party developers. Telegram makes only a few.
- 2Check the exact username
Lookalikes copy names and logos. Look for the verified badge.
- 3Treat it as a stranger
No codes, passwords or card numbers. Block and report fakes.
Updated
