A growing scam targets members right after they find a group: a message or fake portal tells them to "verify you are human" with a bot. The bot asks for a phone number, a login code or a script to paste into the browser. The result is a hijacked Telegram account or an emptied crypto wallet.
How the scam is set up
1. Scammers create a public channel or group that looks like a popular community.
2. Visitors see a "portal" message: "Tap to verify before joining."
3. The button opens a bot with an official-sounding name, such as a variation of a well-known safeguard bot.
4. The bot asks for the phone number and the login code Telegram sends, or tells the user to paste code into the browser console of Telegram Web.
5. With that, the scammer takes over the account and uses it to spam other groups or drain wallets.
Why your group is involved
Even if your group is legitimate, scammers post links to their fake portals in your chat, reply to new members pretending to be your verification step, or create lookalike groups with your name.
Tell members exactly how your group verifies
The best defence is clarity. Pin a message such as:
- "Our group uses join requests approved by admins."
- "No bot will ever ask for your phone number, login code or to paste anything into your browser."
- "Our only official links are listed here."
If you use a captcha or welcome bot, name it explicitly and show its exact username.
Settings that reduce exposure
- Restrict links and inline buttons from new members, so fake portals cannot be posted.
- Remove replies that mention verification from anyone who is not an admin.
- Turn off "Add members" so scammers cannot pull your members into lookalike groups.
- Rotate the invite link if a fake portal is circulating with your branding.
If a member was compromised
1. Remove the account from the group; it may start spamming.
2. Tell the member to terminate other sessions in Telegram settings, from any device they still control.
3. Enable two-step verification immediately.
4. Warn the group that messages from that account are not trustworthy for now.
5. Report the fake bot to Telegram.
Allow the member back once they confirm the account is secured.
Watch for lookalike groups
Search Telegram for your group's name every few weeks. If you find copies using your logo, report them and mention them in your pinned warning.
Automate the cleanup
Fake-verification spam often comes in waves after a group becomes popular. Xiabao (虾宝) (https://xiabao.org ) is a free anti-ad bot for Telegram group owners that deletes advertising and spam messages automatically, which removes portal links before members click them. Add @xiabaotg_bot to your group as an admin with permission to delete messages and ban users, and it takes care of the repetitive cases.
Summary
Be explicit about how your group really verifies people, block links and buttons from newcomers, and act fast when an account is compromised. Members who know the rule "no bot asks for codes" are very hard to scam.
Disclosure: this guide mentions Xiabao (虾宝), a free anti-ad bot for Telegram group owners. Every step works with or without it.