Users are receiving seemingly "official" notifications requesting account login confirmation or additional security verification. Visually, everything appears plausible: the logo, design, and even polite wording.
The main trick is a fake link. If you click on it, a fraudulent authorization form opens. You enter a code – and immediately share access to your account with attackers. After this, they can log into Telegram on your behalf, steal data, or send spam from your account.
The official Telegram support service never contacts you first and does not request confirmation codes in private messages. Any attempts to "restore access" via a link, if you have not initiated the login, are almost certainly a scam. It is best to report and block immediately.
Check if you have two-factor authentication enabled – this significantly enhances security. Do not click on suspicious messages, even from "acquaintances" – if their account has already been compromised, it is also under the control of scammers.