Hacked Telegram Account: How to Recover It (2026)
Hacked Telegram account? What Telegram's own pages say: end unknown sessions, turn on 2-Step Verification, use its login form, and what it cannot do.
Quick answer: If you can still open Telegram, go to Settings > Devices and end any session you do not recognise, then turn on 2-Step Verification in Settings > Privacy and Security. If you are locked out, Telegram's FAQ points to one route: the login-problem form at telegram.org/support. Be realistic: Telegram says the phone number is the only thing it uses to identify a user, and that it relies on volunteers for support.
Telegram works differently from many apps. Its FAQ describes no account-recovery help desk and no identity-check process. What the FAQ does describe is below, and we say plainly where it says nothing.
What to do in 3 steps
- Never share a login code. Telegram says the code for your own account arrives in the verified chat named "Telegram" in your chat list and "should never be shared with anyone". No real support person needs it.
- End unknown sessions. If you can still open Telegram, go to Settings > Devices (the FAQ also words it as Privacy & Security > Active Sessions) and end the sessions you do not recognise.
- Turn on 2-Step Verification in Settings > Privacy and Security, so a phone number or SMS code alone is no longer enough to log in.
A. You can still open Telegram: secure it now
- Terminate other sessions. Telegram's FAQ gives the path Settings > Devices (or Privacy & Security > Active Sessions). Its advice for a stolen phone is to turn on 2-Step Verification and end the session on the old device, because someone who does not know your password cannot log in again.
- Turn on 2-Step Verification. The FAQ says to use Settings > Privacy and Security > 2-Step Verification. Once on, you need both an SMS code and a password to log in. Pick a strong password you do not use anywhere else.
- Add a recovery email. The FAQ says a recovery email can help you regain access if you forget the password, and that the email account should itself have a strong password and 2-Step Verification where possible.
- Consider a passkey. Telegram describes a passkey as an extra way to log in using your device PIN, fingerprint or face scan, managed in Settings > Privacy and Security > Passkeys. You can only create one while you are logged in. Telegram adds that you can still request an SMS code, so keep your phone number up to date and in your control.
- Check your SIM. Telegram ties your account to your phone number. If you suspect someone has your number, the FAQ says to contact your phone provider so they block the old SIM and issue a new one.
B. You are logged out but still control your phone number
Log in again with your phone number in international format, as the FAQ asks (+ country code, then your number). Telegram says the code can come by SMS, or, if you recently used Telegram on another device, as a message in the "Telegram" chat there (a profile with a blue check). Codes by phone call may be unavailable on some carriers or may need 2-Step Verification. Telegram accounts can only be linked to a mobile number, not a landline.
Once you are in, do the steps in section A straight away.
C. The attacker took over your number, session or password
Telegram's FAQ is blunt here. In its answer about a stolen phone, it says the phone number is the only way it can identify a user, and "whoever has the number, has the account". It says it cannot help unless you have access to the phone number or to Telegram on one of your devices. The FAQ describes no ID, selfie or video check.
- If you can still open Telegram on any device, use section A. That is the strongest step available.
- If you are not logged in anywhere and someone else may have your number, the FAQ's first step is to contact your phone provider so they block the old SIM and issue a new one with your number. Once it arrives, log in to Telegram and end the old session in Settings > Devices (or Privacy & Security > Active Sessions).
- If you cannot log in, Telegram's FAQ says to use the form at telegram.org/support. It asks you to describe the problem and give your full legal name, email and phone number. The FAQ also mentions Settings > Ask a question inside the app, and adds that Telegram relies on volunteers for support.
- If an attacker set a 2-Step Verification password you do not know, the FAQ only says a recovery email helps you regain access to a forgotten password. It describes no other route for this case.
D. The account is frozen
Telegram says an account restricted because of reports from other users is "frozen": you can still read chats but cannot send messages or post. You can appeal in the app, and moderators review the case; if the restriction was a mistake, the account is unfrozen. For other kinds of lock, the pages we read do not describe a separate appeal route.
E. After you are back in
- Tell your contacts and groups that your account was hacked, and that messages sent in your name asking for money or codes are not from you.
- Check Settings > Devices again in a day or two for sessions you do not know.
- If you share a device, Telegram suggests setting a passcode in Settings > Privacy and Security.
- If a code from "Verification Codes" appears that you did not request, Telegram says your account is safe: tap it and choose Report.
- If someone is pretending to be you, Telegram's FAQ says to contact @NoToScam.
Warning: fake recovery services and fake support
Anyone who offers to "recover" your Telegram account for money, or who messages you claiming to be Telegram support and asks for your login code or 2-Step password, is not helping you. Telegram's FAQ says login codes must never be shared with anyone. Beyond saying that your login codes arrive in the verified "Telegram" chat, the pages we read do not describe how Telegram contacts users, so treat any unexpected message asking for a code or password as fake. Real recovery goes only through Telegram's own app and its form.
F. If you are being threatened or blackmailed
If the person with your account threatens to share private photos or chats unless you pay, do not pay. Read our guide to sextortion and online blackmail and report it to the police.
G. A child's or teenager's account
Ask a parent or trusted adult to help a young person with these steps, and never share a login code with anyone, including someone who says they are "from Telegram".
What Telegram does not promise
Telegram's FAQ makes no promise to recover an account, gives no timeline, and says it relies on volunteers for support. If the attacker controls your number and every login, and you cannot reach the account on any device, the FAQ says Telegram cannot help.
We checked the steps against Telegram's own help pages on 26 October 2026; menus change, so follow the on-screen prompts if they differ.
Sources
If you have been targeted, you are not alone. See our country-by-country cybercrime help hub for step-by-step reporting and recovery guides.