Telegram Login Codes: Why You Must Never Share Them

A Telegram login code lets whoever types it sign in to your account. Nobody legitimate ever needs it: not Telegram staff, not a group admin, not a bot, not a friend. If anyone asks for your code, for any reason, it is an attempt to take over your account.

This guide explains how login codes work, the stories scammers tell to get them, and what to do if you already shared one.

What a Telegram login code is

When you sign in to Telegram on a new device, you enter your phone number. Telegram then sends a short code, either as a message in your Telegram app on a device where you are already logged in, or by SMS.

Typing that code into the new device proves you control the account. That is the whole purpose of the code. It is not a verification for a group, a prize claim or a security check by a person.

If you have two-step verification turned on, the new device also asks for your password. Without it, the code alone is enough to get in.

Why sharing it is so dangerous

Someone who signs in with your code can:

• Read your cloud chats, groups and channels.
• Message your contacts as you, often asking them for money or for their codes.
• Post in channels and groups where you are an admin.
• Change your settings, and possibly lock you out.
• Use your account to spread the same scam further.

Because the attacker uses your real account, your contacts trust the messages. One shared code can lead to many more.

The tricks scammers use to get your code

The stories change, but the goal is always the same. Here are the most common ones.

"I'm from Telegram support"

A message claims your account is about to be deleted, has a violation, or needs confirming. You are told to send the code you just received. Telegram does not ask for your code in a chat.

"Sorry, I sent my code to your number by mistake"

A friend's account, often already hacked, says a code was sent to you by accident and asks you to forward it. The code is for your account.

Fake group "verification"

You join a group and a bot says you must verify you are human. It asks for your phone number, then the code Telegram sends. Entering it logs the scammer into your account. A real anti-spam check never needs your login code.

Prize, giveaway or airdrop claims

You have "won" something. To claim it, you must share the code or log in through a link. There is no prize.

Fake login pages

A link leads to a page that looks like Telegram and asks for your number and code. Telegram never needs you to log in through a link someone sent you.

Buyers, advertisers and "partners"

Channel owners are told a buyer or advertiser needs to "confirm the account" or "check admin access". They ask for a code or for admin rights. A real deal never requires either.

For more patterns, see our guide on how to spot Telegram scams.

How to read the code message safely

When Telegram sends a code inside the app, it comes from Telegram's official service account. The message usually includes a warning not to share the code with anyone.

• If you did not try to sign in, someone else did. Do not share the code, and treat it as a warning sign.
• If a person or bot is asking for the code at the same time, that confirms it is an attack.
• Do not tap links sent alongside a code by anyone else.

The one rule

Only ever type a Telegram login code into the Telegram app or official Telegram website on a device you are signing in to yourself, at a moment you chose to sign in.

Never send it in a chat. Never read it out on a call. Never type it into a bot, a form or a page someone sent you.

What to do if you already shared your code

Act straight away. Speed matters.

1. Open your active sessions in Telegram's settings, usually under Devices or Privacy and Security.
2. End every session you do not recognise. If unsure, end all other sessions.
3. Turn on two-step verification, or change the password if it is already on.
4. Check your recovery email is yours, and secure that email account too.
5. Warn your contacts through another method that messages from you may not be genuine.
6. Check channels and groups you run for new admins or scam posts.

If you are already locked out, follow our guide on how to recover a hacked Telegram account.

If you did not request a code

Getting a login code you did not ask for means someone typed your phone number into a Telegram login screen. On its own, that does not give them access.

1. Do not share the code.
2. Make sure two-step verification is on.
3. Check your active sessions for anything unfamiliar.
4. Expect a follow-up message asking for the code, and ignore it.

Teach your community

If you run a channel or group, your members are targets too. Scammers often pose as your admins.

• Pin a short message saying admins will never ask for codes, passwords or money in private messages.
• Share your real admin usernames so members can check them.
• Remind people regularly, especially during giveaways and launches, when scammers are most active.

Common mistakes

• Sharing a code with a friend. Their account may already be hacked.
• Believing the message is from Telegram because it says so. Anyone can name themselves "Telegram Support".
• Entering a code into a group verification bot. That is the scam.
• Thinking an expired-looking code is harmless. Never test it.
• Skipping two-step verification. It stops a stolen code from being enough.
• Being too embarrassed to act. Quick action limits the damage.

FAQ

Will Telegram ever ask me for my login code?

No. Telegram sends the code so you can type it into the app yourself. It does not ask you to send it back in a chat.

What if a friend asks for my code?

Do not send it. Contact them another way, because their account has probably been taken over.

Is it safe to share my code if I have two-step verification?

No. The attacker may then try to trick you into sharing the password too. Never share either.

Why did I get a login code I did not request?

Someone entered your phone number on a login screen. Do not share the code, turn on two-step verification and check your sessions.

Can someone hack my account with only my phone number?

Not on its own. They usually need the code, which is why they try so hard to get it from you.

Is it safe to share the code with a bot that verifies group members?

No. Real group checks never need your Telegram login code.

Summary

Your Telegram login code is the key to your account, and no one but you ever needs it. Scammers pose as support, friends, bots, prize givers and buyers to get it. Type codes only into the Telegram app when you are signing in yourself, keep two-step verification on, and if you shared a code, end unknown sessions and secure your account immediately. For a wider look, read Is Telegram safe?.