Telegram
Telegram has been named in 9 documented digital harm incidents, including 4 involving minors. The most common harm domain is Fraud & Financial, followed by Child Safety.
Documented Incidents
9WhatsApp removes 6.8 million accounts linked to pig butchering scams spreading via ChatGPT and Telegram
WhatsApp deleted over 6.8 million accounts linked to pig butchering scams, a type of fraud that combines romance and investment schemes. Scammers used AI tools like ChatGPT to craft initial messages and then shifted conversations to Telegram to carry out the fraud. These scams often involve building trust with victims before defrauding them, typically through fake investment platforms. A recent study found that crypto scams have caused over $60 billion in reported losses, with fraudulent trading platforms being the most common. Scammers also used tactics like asking victims to complete small tasks on social media before requesting real money deposits into crypto accounts. Experts warn that coordinated efforts among banks, regulators, and tech platforms are needed to combat this growing threat.
Wisconsin software engineer arrested for creating AI-generated child sexual abuse images
Steven Anderegg, a 42-year-old software engineer from Wisconsin, was arrested for allegedly creating and distributing AI-generated child sexual abuse material (CSAM) using the Stable Diffusion AI tool. Authorities allege he sent thousands of illicit images of minors to a 15-year-old boy via Instagram direct messages and shared disturbing content on social media platforms. Law enforcement became aware of Anderegg in October after the National Center for Missing & Exploited Children flagged his activity. An investigation revealed over 13,000 images on his computer, many depicting minors in explicit contexts. If convicted, Anderegg faces up to 70 years in prison, with prosecutors suggesting a potential life sentence.
Meta removes 2 million accounts linked to pig butchering scam networks across its platforms
Meta removed over 2 million accounts linked to "pig-butchering" scams in 2024, which involve scammers building fake online relationships to defraud victims of cryptocurrency investments. The scams often begin on dating apps or social media platforms like Facebook, Instagram, and WhatsApp, before moving to Telegram, which is known for limited moderation. In September 2024, the FBI reported that victims lost nearly $4 billion to crypto investment scams, primarily pig-butchering. Meta announced new measures, including automatically flagging potential scam messages and collaborating with other tech companies through the Tech Against Scams coalition. The company also took down accounts linked to a scam operation in Cambodia, which had used AI tools like ChatGPT to communicate with victims. Critics, however, argue that these efforts are insufficient and too slow to address the growing scale of the problem.
Pig butchering victim recovers $140,000 after investigators trace cryptocurrency to scam wallets
Aleksey Madan, a 69-year-old victim of a cryptocurrency scam, recently recovered $140,000 he had lost to a fraudulent company called SpireBit. Massachusetts authorities seized the funds as part of an investigation into SpireBit, which targeted Russian-speaking seniors with fake investment opportunities. The scam, known as "pig butchering," involved building trust with victims before stealing large sums of money. SpireBit used social media ads with a fake Elon Musk endorsement and provided false information about executives and a London address. Massachusetts officials, following an NPR investigation, obtained a court order to freeze SpireBit’s assets on Binance and recovered $269,000, which is being returned to victims. The FBI reported that crypto scammers stole over $5.6 billion from Americans in 2022.
Slovak election campaign targeted by AI deepfake disinformation spread by trolls
Trolls in Slovakia used AI-generated deepfake voices of politicians to spread disinformation ahead of the parliamentary elections, which took place in early October 2023. The deepfake videos, featuring audio impersonating political figures like Michal Šimečka and Zuzana Čaputová, were shared on platforms such as Facebook, Instagram, and Telegram. The content was found to be synthesized using AI tools trained on real voice samples, with some clips remaining online without disclaimers. Meta stated that political posts are not subject to fact-checking to preserve free speech, but fact-checkers continue to debunk false claims. The use of AI deepfakes in this election highlighted growing concerns about disinformation and its potential to influence voter behavior in closely contested races. Researchers noted that deepfake technology has become more accessible, enabling coordinated manipulation efforts.
Singapore teens seeking friends on Telegram groomed by predators via dating features
A Singaporean teen was targeted by an online predator who used a dating bot on social media to find girls under 16 years old. The predator communicated with victims through Telegram, a messaging platform popular among teens in Singapore. The incident highlights the hidden risks of using dating bots and unregulated online spaces for social interaction. The case has raised concerns about child safety and the need for better online protections for minors.
Deepfake Pornography Victim in Sheffield, UK Sparks Legal Action and Awareness
Helen Mort, a poet and broadcaster from Sheffield, UK, discovered that deepfake pornography had been created using her images without her consent. The deepfake content was generated from photos she had posted on her now-deleted Facebook profile and depicted her in violent pornographic material. The incident has drawn attention to the growing issue of non-consensual deepfake pornography and has contributed to legal efforts to address such harms.
Xinbi: The $8 Billion Colorado-Incorporated Marketplace for Pig-Butchering Scammers and North Korean Hackers - Elliptic
Xinbi Guarantee is a Chinese-language, Telegram-based marketplace that facilitates financial fraud and money laundering, with over $8.4 billion in USDT transactions since 2022. It is operated through Xinbi Co. Ltd, a company incorporated in Colorado in August 2022 but marked as delinquent in January 2025. The marketplace serves fraudsters, including those involved in "pig butchering" scams, and offers services such as money laundering, stolen personal data, and fake IDs. In November 2024, Xinbi Guarantee was used to launder $220,000 in USDT stolen from the WazirX crypto exchange by North Korean hackers. In July 2024, Elliptic identified Huione Guarantee, a similar marketplace with $27 billion in transactions, which was later designated by the U.S. Treasury in May 2025 as a money-laundering operation. In response to Elliptic's research, Telegram closed thousands of channels linked to Xinbi and Huione, disrupting their operations.
Secretive global network of nonconsensual deepfake pornography sites revealed
A Bellingcat investigation uncovered a global network of nonconsensual deepfake pornography sites, including Clothoff, Nudify, Undress, and DrawNudes, which evade bans by disguising their activities. Tokens for Clothoff were being sold on G2A, a gaming marketplace, which later suspended the accounts involved. The incident highlights the involvement of multiple platforms and companies in facilitating the distribution of nonconsensual deepfake pornography.