Users are receiving seemingly "official" notifications requesting them to confirm account login or undergo additional security checks. Visually, everything appears plausible: logo, design, even polite wording.
The main trick is a fake link. If you click on it, a fraudulent authorization form opens. You enter the code – and immediately share access to your account with attackers. After this, they can log into Telegram on your behalf, steal data, or send spam from your account.The genuine Telegram support service never contacts you first and does not request confirmation codes in private messages. Any attempts to "restore access" via a link, if you did not initiate the login, are almost certainly a scam. It is best to report and block immediately.
Check if you have two-factor authentication enabled – this significantly enhances security. Do not click on suspicious messages, even from "acquaintances" – if their account has already been compromised, it is also under the control of scammers.