Apps

Telegram’s peer-to-peer SMS login service is a privacy nightmare

Comment

Telegram logo amid flames
Image Credits: Bryce Durbin/TechCrunch

Telegram has introduced a controversial new feature that grants users a free premium membership in exchange for allowing the instant messaging app to utilize their phone number as a relay for sending one-time SMS passwords to other users attempting to log into the platform, raising concerns about potential privacy risks and the exposure of personal information.

The feature, spotted first by the TGInfoEn Telegram channel (via reverse engineer AssembleDebug), is rolling out in select countries for Telegram for Android users. If you agree to let Telegram use your number as an OTP relay, the company will send you a transferable code for Telegram Premium.

The terms of service for this peer-to-peer login program notes that the company will send a maximum of 150 OTP messages per month. Participating users, who may also be charged for local and international SMS usage, will have to hit a certain quota to be able to avail the complimentary subscription. From a monetary perspective, you might end up paying more through your phone bill than the value of Telegram’s premium membership.

Then there is a massive issue of privacy, which allows strangers to look up your number and use it for spam and fraud. Telegram allows users to hide their phone numbers from strangers, but using your number as a relay could allow them to look up your Telegram account.

The terms indicate that people participating in the program won’t hold Telegram liable for any damages and give the company absolute indemnity from all claims related to peer-to-peer login.

“You acknowledge and agree that Telegram shall bear no liability for any costs, expenses, damages, or any other adverse or otherwise unforeseen consequences that you may incur as a direct or indirect consequence of your present or past participation in the P2PL Program,” they read.

Telegram tells users not to engage with people who receive an OTP code from their number, but there is no way to enforce that.

The company launched a subscription service two years ago with features like transcription, exclusive stickers, reactions and other customizations. Telegram has introduced features like Stories for paid users. However, users opting into the peer-to-peer login system have to think if giving out their phone number to strangers to save a few bucks is worth the hassle.

More TechCrunch

The California Supreme Court ruled Thursday that Proposition 22 – the ballot measure that passed in November 2020 and classified app-based gig workers as independent contractors rather than employees –…

Uber, Lyft, DoorDash can continue to classify drivers as contractors in California

WhatsApp has recently ramped up its marketing push in the U.S. In the past few years, WhatsApp has placed ad campaigns, placements in Times Square and TV spots emphasizing privacy and end-to-end…

Mark Zuckerberg says WhatsApp has 100 million monthly active users in the U.S.

Welcome back to TechCrunch Mobility — your central hub for news and insights on the future of transportation. Sign up here for free — just click TechCrunch Mobility! I don’t…

Alphabet pours $5B into Waymo, Cruise scraps the Origin and Elon’s bet on autonomy

In addition to insured commitments, Archera provides consulting services to help build purchasing strategies for customers to optimize their cloud usage.

Archera helps customers access deep cloud discounts

In its bid to maintain pace with generative AI rivals like Anthropic and OpenAI, Google is rolling out updates to the no-fee tier of Gemini, its AI-powered chatbot. The updates…

Google makes its Gemini chatbot faster and more widely available

Until a year ago, Arjun Pillai had the comfortable yet important role of chief data officer at ZoomInfo, a B2B database company. But the serial entrepreneur was getting antsy. He…

ZoomInfo alum raises $15M for startup that builds AI sales engineers

Substack is rolling out the ability for writers to draft and publish new posts directly from their phone via its iOS app, the company announced on Thursday. Until now, users…

Substack writers can now draft and publish posts in iOS app

Disrupt 2024 is the premier event where tech careers are launched, connections are forged, and the future of technology talent takes center stage. The Disrupt Career Fair is the perfect…

Disrupt 2024 Career Fair: Your gateway to top tech talent

Featured Article

Hacked, leaked, exposed: Why you should never use stalkerware apps

Using stalkerware is creepy, unethical, potentially illegal, and puts your data and that of your loved ones in danger.

Hacked, leaked, exposed: Why you should never use stalkerware apps

Featured Article

Endeavor CEO says long-term capital needs to be prioritized in emerging ecosystems

Venture capital has become a more global industry as the tech sector slowly decentralizes. In 2022, more than 50% of VC deployed globally was invested in startups outside the U.S., according to data available from the National Science Foundation (NSF) — a stark contrast to 20 years ago, when nearly…

Endeavor CEO says long-term capital needs to be prioritized in emerging ecosystems

Featured Article

Data breach exposes US spyware maker behind Windows, Mac, Android and Chromebook malware

Exclusive: The Minnesota-based spyware maker Spytech snooped on thousands of devices before it was hacked earlier this year.

Data breach exposes US spyware maker behind Windows, Mac, Android and Chromebook malware

The e-commerce market in South Korea ranks as one of the largest in the world, but it’s also proving to be a precarious one. On Thursday, South Korea’s Fair Trade…

Singaporean e-commerce firm Qoo10’s Korean units face probe due to payment delays to merchants

Don Burnette, CEO and co-founder of self-driving truck startup Kodiak Robotics, had an “a-ha” moment when the company started working with the U.S. Department of Defense.  Kodiak’s mission has always…

Kodiak Robotics is taking self-driving trucks off road to reach profitability faster

Satellites are among our most critical infrastructure, providing everything from GPS to disaster coordination, yet their inherent inaccessibility leaves them vulnerable to relatively simple technical issues or attacks. London-based Lodestar…

Lodestar’s robotic arm will be an orbital ‘first responder’ for satellites in need

Voice recognition is getting integrated in nearly all facets of modern living, but there remains a big gap: speakers of minority languages and those with thick accents or speech disorders…

Intron Health gets backing for its speech recognition tool that recognizes African accents

The startup has developed a way to create copper and aluminum foils that are laced with tiny holes and riddled with undulating peaks and valleys.

GM-backed Addionics aims to make lithium-ion batteries cheaper with wavy foil

This is a significant milestone for the London-based fintech company, particularly since it has been trying to secure this license since 2021.

Revolut receives long-awaited UK banking license

The Board wants Meta to change the terminology it uses for labeling explicit, AI-generated images from “derogatory” to “non-consensual.”

Oversight Board wants Meta to refine its policies around AI-generated explicit images

Google Maps is improving navigation through flyovers and narrow roads in India through new feature updates.

Google Maps adds a slew of features to entice Indian drivers, commuters and travelers

Public market investors have a large variety of infrastructure and software that helps them keep track of, analyze and manage their investments, but that’s not the case for investors in…

bunch raises $15.5M for its platform that simplifies investment management for VCs

India’s Jio has partnered with Taiwanese semiconductor giant MediaTek to launch its 4G smart dashboards for electric two-wheelers.

Jio partners with Taiwan’s MediaTek to tap into two-wheeler EV market

A hacker claims to be selling data relating to thousands of current and former employees of India’s Piramal Group.

Hacker claims theft of Piramal Group’s employee data

CRED, an Indian fintech startup, has rolled out a new feature that will help its customers manage and gain deeper insights into their cash flow, as the startup seeks to…

CRED launches personal finance manager for India’s affluent

A powerful new video-generating AI model became widely available today — but there’s a catch: The model appears to be censoring topics deemed too politically sensitive by the government in…

A new Chinese video-generating model appears to be censoring politically sensitive topics

Our growth as a civilization is tightly coupled to our ability to sufficiently generate ever-increasing amounts of electricity. Could the same be true in space?  Star Catcher Industries, a startup…

Star Catcher wants to build a space power grid to supercharge orbital industry

For frontier AI models, when it rains, it pours. Mistral released a fresh new flagship model on Wednesday, Large 2, which it claims to be on par with the latest…

Mistral’s Large 2 is its answer to Meta and OpenAI’s latest models

Researchers at MIT CSAIL this week are showcasing a new method for training home robots in simulation.

Researchers are training home robots in simulations based on iPhone scans

Apple announced on Wednesday that Apple Maps is now available on the web via a public beta, which means you can now access the service directly from your browser. The…

Apple Maps launches on the web to challenge Google Maps

AltStore, an alternative app store, has launched its first batch of third-party iOS apps in the European Union. The rollout comes a few months after the company launched an updated…

Alternative app store AltStore PAL adds third-party iOS apps in wake of EU Apple ruling

Microsoft this afternoon previewed its answer to Google’s AI-powered search experiences: Bing generative search. Available for only a “small percentage” of users at the moment, Bing generative search, underpinned by…

Bing previews its answer to Google’s AI Overviews