Using Telegram comes with certain security risks, especially regarding data privacy and the platform's encryption methods. One key concern is that Telegram's standard chats are not end-to-end encrypted by default, meaning Telegram retains the encryption keys. This raises the risk of user data being accessed by the company or external actors with access to those keys. Additionally, in 2024, Telegram has begun to comply more actively with law enforcement requests for user data, which could pose a risk for users in politically sensitive regions. The platform has also been targeted by hackers and cybercriminals exploiting its popularity to conduct phishing and fraud attacks.Hackers attack Telegram in several ways by exploiting its security features, vulnerabilities, and user behaviors. Here are the primary attack vectors:

1. Phishing Attacks: Hackers often send fake messages or links to users, pretending to be from Telegram or other trusted sources. These phishing attacks trick users into providing sensitive information like login credentials or phone numbers, which are then used to take over their accounts.
2. Exploitation of Non-Encrypted Chats: Telegram’s default chats are not end-to-end encrypted, meaning data can be intercepted between users and the platform's servers. If Telegram's servers are compromised, attackers could potentially access user data, including chat logs.
3. SIM Swapping: Hackers sometimes use SIM swapping, where they convince telecom providers to transfer a victim’s phone number to a new SIM card. Once in control of the victim’s phone number, they can bypass Telegram’s two-factor authentication (which uses SMS) and take control of the account.
4. Malicious Telegram Bots: Telegram allows users to create and use bots for various tasks, but these can be exploited to spread malware or perform malicious activities. Hackers may develop bots that appear useful but contain code that steals data or carries out phishing attacks​.