Telegram: ‘The dark web in your pocket’

About nine months ago, while investigating a story, I inadvertently became part of several Telegram channels focused on illicit activities. Initially, I was added to a channel dedicated to drug sales, followed by one about hacking and another involving stolen credit cards. This exposure was a result of my Telegram settings, which allowed anyone to add me to groups without my consent. I left the settings unchanged to observe the extent of this phenomenon.

In a matter of months, I was added to 82 different groups. Although I eventually adjusted my settings to prevent further additions, I now find myself inundated with thousands of new messages from various highly active illegal groups each time I log in.

The recent arrest of Telegram’s billionaire CEO, Pavel Durov, in France has intensified discussions about the app’s moderation policies. Durov faces charges related to facilitating illicit transactions, drug trafficking, fraud, and the distribution of child sexual abuse material. This controversy underscores a significant concern: the broader issue of criminal activity on social media platforms, a problem that law enforcement officials have been highlighting for years.

The nature of the groups I was added to reveals the extent of criminality on Telegram. Although I have altered the names of these channels to avoid promoting them, their content illustrates the app’s problematic role. This is why some observers, such as cybersecurity podcaster Patrick Gray, have referred to Telegram as “the dark web in your pocket.”

The dark web, accessible only through specialized software and knowledge, has long been a marketplace for illegal goods and services, especially since the Silk Road emerged in 2011. Gray, on his podcast Risky Business, emphasized that Telegram has become a sanctuary for criminal activities, including child sexual abuse material and drug sales. He noted, “We are talking about absolutely dark web levels of criminality that they’re just doing nothing about.”

Criminals are drawn to the dark web for its anonymity, which obscures users’ locations through international data routing. Identifying individuals behind specific usernames is exceptionally difficult. According to researchers from cybersecurity firm Intel471, while such activities were previously confined to hidden dark web services, Telegram has become a popular venue for less sophisticated cybercriminals.

Groups like Qilin, which recently targeted NHS hospitals, chose to publicize stolen data on Telegram before its dark web site. Similarly, services involved in creating fake images of schoolgirls operate extensively on Telegram. While some criminal channels on Telegram also have a presence on platforms like Snapchat and Instagram, drug dealers often use these sites to direct users to their Telegram channels.

In response to these issues, Latvian state police established a dedicated unit in January to monitor chat apps for drug trafficking, with Telegram identified as a primary concern. Despite Telegram’s claims of adhering to “industry standards” in moderation, recent evidence suggests otherwise, particularly regarding child sexual abuse material. it has been reported that, Telegram does respond to some takedown requests but is not involved in proactive measures to prevent the spread of such material. French prosecutors have accused Telegram of inadequate moderation and cooperation in combating child exploitation.

Telegram asserts it actively searches for illegal activity, including child sexual abuse, and took unspecified actions against 45,000 groups in August. However, the company’s response to law enforcement requests remains a significant issue. Brian Fishman, co-founder of Cinder, criticized Telegram for its tolerance of harmful content and inadequate engagement with law enforcement.

Although Telegram offers privacy features similar to those of Signal and WhatsApp through “Secret Chats,” these are not the default setting. Most illicit activity on the app is not conducted through these encrypted conversations, meaning Telegram could theoretically monitor and report illegal content if it chose to. However, the company’s terms of service state that it does not process requests related to private chats.

French authorities have criticized Telegram for its lack of response to legal requests, reflecting a broader frustration among law enforcement officials.

Despite the criticisms, digital rights organization Access Now has expressed concern over Durov’s arrest, warning that it could lead to over-censorship and reduced freedom of expression. Telegram maintains that it is not responsible for the misuse of its platform, while Elon Musk and some criminals on Telegram have called for Durov’s release, citing the arrest as an infringement on free speech.