Telegram’s peer-to-peer SMS login service is a privacy nightmare

Telegram has launched a controversial new feature that grants users a free premium membership in exchange for allowing the messaging app to use their phone numbers as relays to send one-time SMS passwords to other users trying to log into the platform , which has raised concerns about potential privacy risks and exposure of personal information.

The feature was first discovered (via reverse engineering) by the TGInfoEn Telegram channel Assembly debugging), Telegram is rolling out to Android users in select countries. If you agree to Telegram using your number as an OTP relay, the company will send you a transferable code for Telegram Premium.

The peer-to-peer login program’s terms of service state that the company can send up to 150 OTP messages per month. Participating users may also be charged for local and international text messaging usage, but must reach a certain quota to enjoy the free subscription. From a monetary perspective, you could end up paying more on your phone bill than a Telegram premium membership is worth.

There’s also a huge privacy concern, strangers can look up your number and use it for spam and fraud. Telegram allows users to hide their phone number from strangers, but using your number as a relay may allow them to look for your Telegram account.

These terms state that those participating in the program will not hold Telegram liable for any damages and give the company absolute indemnity against all claims related to peer-to-peer logins.

“You acknowledge and agree that Telegram is not responsible for any costs, expenses, damages or any other adverse or otherwise unforeseen consequences that may arise as a direct or indirect result of your current or past participation in the P2PL Program,” they read.

Telegram tells users not to interact with people who receive OTP codes on their numbers, but there is no way to enforce it.

The company launched a subscription service two years ago that offers features like transcription, exclusive stickers, reactions and other customizations. Telegram has launched Stories and other features for paid users. However, users who choose to use a peer-to-peer login system must consider whether it is worth giving out their phone number to a stranger to save some money.