Are Telegram Bots Safe? What a Bot Can and Cannot See

Telegram bots are generally safe to use, as long as you know what they can see and choose bots you trust. A bot sees what you send it and your basic public profile, not your other chats, your contacts or your phone number unless you share it. The real risk is not the technology but bots run by people who try to trick you into giving away codes, passwords or money.

This guide explains exactly what a bot can and cannot see in different situations, and the habits that keep you safe.

Who you are trusting when you use a bot

A bot is a Telegram account controlled by a program. Telegram provides the platform, but almost every bot is run by an independent developer on their own server.

When you message a bot, Telegram passes your message to that developer's program. What happens next, including whether your messages are stored, is up to the developer. So using a bot means trusting two parties: Telegram, which delivers the messages, and the bot's operator, who reads and handles them.

That is the key idea. A bot's safety depends mostly on who runs it.

What a bot can see in a private chat

What it gets when you press Start

When you start a bot, it can see your basic public profile details. These typically include your name, your username if you have one, and a numeric user ID. It may also see general information such as your app's language setting, depending on Telegram's current Bot API.

What it gets as you chat

The bot receives everything you send in its chat: text, photos, files, voice messages and anything you forward to it. If you forward a message from someone else, the bot sees that message too.

What it does not get

• Your phone number, unless you tap a button to share your contact.
• Your location, unless you choose to send it.
• Your other chats, with people, groups or other bots.
• Your contact list.
• Your Telegram password or login codes, unless you type them in, which you should never do.
• Your secret chats. Secret chats are one-to-one, end-to-end encrypted chats between people, and bots are not part of them.

What a bot can see in a group

Bots in groups work differently depending on their settings and role.

A bot that is not an admin

Bots have a privacy mode, which the developer controls. With privacy mode on, which is the default, a bot in a group usually only receives messages meant for it, such as commands and replies to its own messages.

If the developer turns privacy mode off, the bot can receive all messages in the group. You cannot always tell from outside which setting a bot uses.

A bot that is an admin

A bot with admin rights generally receives all messages in the group. That is normal for moderation bots, which need to see messages to remove spam. It also means you should be comfortable with who runs the bot.

What this means for members

If you are in a group with bots, assume that anything you post there could be seen by those bots' operators. That is not a reason to panic. Group messages are already visible to every member. It is a reason not to post private details in groups.

To understand what other people in a group can see about you, read Who Can See You in Telegram Channels and Groups.

What a bot can see in a channel

In a channel, a bot can only act if it is an admin. A bot admin can do what its permissions allow, such as posting, editing or deleting messages. Telegram limits what bots can access through its Bot API, and the channel's owner decides which rights the bot gets.

Subscribers of a channel do not share their messages with the channel, because channels are one-way. Readers who comment do so in the linked discussion group, where the group rules above apply.

If you run a channel, give bots only the rights they need. See How to Add a Bot to a Telegram Channel or Group.

What a Mini App can see

Some bots open a Mini App, a web page inside Telegram. When you open one, Telegram passes it basic signed launch information, including your public profile basics. It does not get your phone number, chats or contacts unless you agree to share something specific.

Anything you type into a Mini App goes to its developer, just like a website. Treat it with the same care you would give any website.

The real risks

The technology limits what bots can see. The real dangers come from what people are persuaded to share.

Phishing for login codes

A fake bot may claim your account is at risk and ask for the code Telegram sends you. That code lets someone log in as you. Never send it to anyone. Read Never Share Your Telegram Login Code.

Fake versions of real bots

Scammers copy the name and picture of popular bots. A tiny difference in the username is often the only clue. Check usernames carefully.

Investment and "earn" schemes

Bots that promise guaranteed returns, doubled deposits or easy income are a common scam pattern. Nothing here is financial advice, but promises of guaranteed profit are a strong warning sign.

Requests for wallet phrases

No genuine bot needs your crypto wallet recovery phrase. Anyone who asks for it is trying to take the wallet.

Oversharing personal data

Even honest bots store data. The less personal information you share, the less can be lost or misused if the operator is careless.

Habits that keep you safe

1. Find bots through trusted sources. Use the developer's official website or channel. See How to Find a Telegram Bot Safely.
2. Check the exact username before pressing Start.
3. Never share login codes, passwords or wallet phrases with any bot.
4. Share your contact or location only when needed, and only with bots you trust.
5. Turn on two-step verification for your account, so a leaked code alone is not enough to log in.
6. Review permission requests in Mini Apps and decline anything unnecessary.
7. Stop and block bots you no longer use.
8. Report suspicious bots in Telegram.

Common mistakes

• Assuming Telegram vets every bot. Ordinary bots are not reviewed before they go live. Judge each one yourself.
• Thinking a bot can read all your chats. It cannot. Worry about what you send it, not about your other conversations.
• Ignoring group bots. In groups, admin bots usually see every message. Do not post private details there.
• Typing a login code into a bot "to verify". This is the most common way accounts are stolen.
• Trusting a familiar name and picture. Both are easy to copy. Check the username.
• Giving admin bots every permission. If you run a community, grant the minimum.

FAQ

Can a Telegram bot see my phone number?

Not by default. A bot only receives your phone number if you choose to share your contact with it.

Can a bot read my private messages with other people?

No. A bot only receives messages sent to it directly, or in groups and channels where it has been added and has access.

Do bots see my messages in groups?

It depends. A non-admin bot with privacy mode on usually sees only commands and replies to it. An admin bot, or one with privacy mode off, can see all messages.

Can a bot hack my account?

Not on its own. Accounts are usually lost when someone sends a login code or password to a fake bot. Never share them, and turn on two-step verification.

Is it safe to block or delete a bot?

Yes. Blocking or deleting the chat stops the bot messaging you. It does not delete data the operator already stored, so share carefully from the start.

Does a "verified" label mean a bot is safe?

Telegram's verification confirms an account belongs to who it claims to be. It does not guarantee the service is good. On TGDirectory, our "Owner verified" badge only means an owner proved control of a listing; it is not an endorsement.

Summary

Telegram bots see what you send them and your basic public profile. They do not see your other chats, contacts or phone number unless you share them, and they are never part of secret chats. In groups, admin bots usually see every message. The main risk is people using bots to trick you, so find bots through trusted sources, check usernames, never share login codes, passwords or wallet phrases, and turn on two-step verification. For more on safety, read Is Telegram Safe?.