Unverified50% confidenceDecision RuleExact time
It is recommended to add your Telegram account to the allowlist to prevent others from sending messages after finding the bot, and Telegram chats are not end-to-end encrypted, so passwords or banking information should not be sent.
1
Sources
50%
Confidence
Long-term
Relevance
10/25/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedBy default, any person with a Telegram Bot link can initiate a conversation, so a whitelist mechanism to restrict the range of accessible users should be configured as a priority.74% similarUnverifiedAccounts authorized via Telegram QR code scanning are automatically whitelisted, and messages from others will receive no response.74% similarUnverifiedA Telegram Bot's API Key is equivalent to a VPS password; if leaked, an attacker can directly control the bot via APIs such as sendMessage.70% similarUnverifiedCompared with SMS, Telegram messages cost almost nothing per message in most regions and support rich text, buttons, and file attachments; however, their limitation is that they depend on patients actively installing and authorizing Telegram, with limited coverage among people unfamiliar with the app, so in actual deployment they often need to run alongside SMS or email channels as a fallback.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1097335API
curl https://kongchang.com/api/v1/knowledge/claims/1097335MCP
get_claim(id=1097335)