Cybercriminals exploit Telegram’s gifting feature to hijack accounts through sophisticated phishing campaigns. These fraudulent “free Premium subscription” offers aim to steal credentials and compromise entire contact lists.

How the Scam Works

1. Deceptive Messaging

You receive a message (often from a compromised friend’s account) claiming you’ve won a “1-year Telegram Premium subscription” or similar offer12.

The message includes a link resembling Telegram’s official t.me/premium domain but redirects to a phishing site24.

2. Credential Harvesting

The fake login page mimics Telegram’s interface, prompting you to enter:

Phone number

SMS verification code

Two-factor authentication (2FA) password (if enabled)23.

Scammers immediately gain access to your account upon submission4.

3. Silent Takeover

Attackers use Telegram’s multi-session feature to maintain access without alerting you1.

They delete sent phishing messages from your chat history, making detection difficult13.

4. The 24-Hour Trap

A fake countdown timer claims your “gift” will activate in 24 hours.

In reality, scammers exploit Telegram’s security rule: they wait 24 hours to terminate all your active sessions, locking you out permanently12.

Red Flags of a Compromised Account
Unexpected messages from contacts about “strange links” you supposedly sent1.

Profile changes (e.g., username altered to include phishing URLs)1.

Login alerts for unrecognized devices14.

Immediate Action Required
If You Clicked the Link:

Terminate Suspicious Sessions:

Go to Settings → Devices → Terminate All Other Sessions14.

Enable 2FA:

Set a strong password under Privacy & Security → Two-Step Verification14.

Reset Credentials:

Change your Telegram password and linked email immediately4.

If Already Locked Out:

Use SMS recovery within 24 hours or reset your account via Forgot Password? → Reset Account (erases chat history)1.

Prevention Strategies
Verify “Gifts” Directly: Contact the sender via another platform before clicking links24.

Avoid Third-Party Apps: Only download Telegram from official stores2.

Critical Insight: These scams target all users, not just high-profile accounts. Share this alert with contacts to disrupt the phishing chain34.