Telegram unveils Peer-to-Peer login program which poses security risks

Telegram has introduced the Peer-to-Peer Login Program, noticed by the Telegram Info English Channel and reported by Android Police via AssembleDebug on X (formerly Twitter).

It offers users free Premium access if they send login verification codes via SMS. However, it raises privacy concerns as it may expose users’ phone numbers to strangers when sending up to 100 SMS codes per month.

The program, affecting 0.01% of users, provides a month of Premium for each participant. However, Telegram disclaims responsibility for any charges incurred from sending SMS codes.

Acceptance seems as simple as ticking a checkbox, potentially leading to security risks for both senders and receivers, who can see each other’s numbers.

Telegram states the following terms in its service agreement:
  • Privacy: The program aims to protect privacy but cannot prevent recipients from seeing your number. Users must understand and manage risks themselves. Telegram is not liable for any harm caused.
  • Communication: Participants must only send automated SMS codes and refrain from contacting recipients. Sharing personal information may result in termination and legal action.
  • Availability: The program may not be available in some regions due to demand, regulations, or infrastructure. Users can withdraw at any time.
  • Cancellation: Participants can leave the program at any time, removing their number from relay services.

While Telegram prohibits contacting numbers sent codes, there’s no evident blocking mechanism. This system could expose users’ numbers to strangers, potentially leading to data leaks, harassment, and spam.

Telegram acknowledges regional limitations but doesn’t clarify its phone number sharing practices in its privacy policy, possibly violating it.

Participating users might face issues with their mobile providers, as sending automated messages could breach terms. This poses risks, especially in politically sensitive contexts where Telegram is commonly used.

Despite Telegram’s claims of privacy protection, this program deviates from industry standards, potentially compromising user safety. The risk of exposure as Telegram users increases, undermining the platform’s security assurances.

Overall, the benefits of free Premium don’t outweigh the risks posed by this SMS verification program.

SourceVia 1, 2


Related Post