Spanish Consumer Association warns of Telegram phishing scam

The Spanish Consumer Association (AEC) has issued an alert regarding a wave of phishing attacks targeting Telegram users. Scammers are impersonating the messaging platform by sending notifications that appear to be official system alerts.

The fraudulent messages claim that a user's account is in a “provisional state” and warn that it will be disabled or deleted within 48 hours unless a “security verification” is completed. To facilitate the theft, the messages prompt users to click a link and enter a five-digit code. This code is actually the security key generated by the Telegram app; once entered, criminals gain full access to the account and lock the legitimate owner out.

The AEC advises users to never click on links provided in these chats and to only complete verifications through the official application settings. Miguel A. Ruiz, president of the association, noted that the rise in such scams highlights a critical need for better digital literacy and more effective public institutional protection against technological risks.