Telegram

Telegram is a messaging service launched in 2013 by Pavel and Nikolai Durov, headquartered nominally in Dubai (the company has had multiple HQ locations, including London, Berlin, Singapore). Around 950 million monthly active users in 2026. Default chats are not end-to-end encrypted (server-side encryption only, Telegram can read content); only “Secret Chats” enabled per-conversation are end-to-end encrypted, and the feature is not available in group chats or channels.

What it means in practice

Telegram’s structural privacy posture is weaker than the marketing implies. The MTProto protocol used for default chats is server-encrypted, meaning Telegram holds keys and can technically produce content under legal process. Pavel Durov’s 2024 arrest in France over content-moderation cooperation shifted Telegram’s public stance: the company began complying with more law-enforcement requests for IP addresses and phone numbers tied to accounts, which the historical Telegram framing had suggested it would refuse. Secret Chats (per-conversation, manual enable) are end-to-end encrypted and not stored on Telegram’s servers, but they only work on the device where they were initiated and do not sync across devices. The huge adoption among activists, journalists, and crypto communities reflects the channel and group features rather than the encryption posture; for sensitive one-to-one conversations, Signal is the structural answer, not Telegram.

Where it shows up

Heavy adoption among: cryptocurrency communities (the channel feature is dominant for trading groups, NFT communities, scam networks), Russian and Ukrainian audiences (Telegram is the dominant Russian-language messenger for both civilian and military users; the OSINT community follows Russia-Ukraine via Telegram channels), Iranian dissidents (Telegram has been intermittently blocked in Iran), Hong Kong protesters (used heavily during 2019, with documented operational-security failures attributed to default-encryption misunderstandings), and global broadcaster channels with millions of subscribers. The threat surface for an individual using Telegram for sensitive direct messages is the default-not-E2EE behavior and the now-confirmed law-enforcement-cooperation posture.

What you can change today

If Telegram is your primary channel for sensitive conversations, switch to Signal for that subset. Telegram is fine for public channels, group chats where the security is community-tier rather than individual-tier, and casual conversations. For direct messages that matter, the operational rule: Signal for the conversation that would be costly if produced under subpoena, Telegram for the conversation that is essentially public anyway. If you must use Telegram for a sensitive direct message, enable Secret Chat (tap the contact, three dots, Start Secret Chat); accept the limitation that the chat lives on one device and does not sync.

Related articles