Telegram's latest offering has eyebrows raised: a free premium membership in exchange for letting them use your phone number to send one-time login codes (OTPs) to other users.
This "peer-to-peer login program" sounds good on paper, but security experts are warning of potential downsides.
Unearthed by the TGInfoEn Telegram channel and reverse engineer AssembleDebug, this feature is currently limited to select countries on the Android app.
Users who agree to be OTP relays receive a transferable code for Telegram Premium – a subscription service offering perks like chat transcription, stickers, and reactions.
Sounds like a win-win, right? Not quite. Here's where things get murky:
- Privacy Peril: Telegram allows hiding phone numbers from strangers, but using your number as a relay could expose it, potentially leading to spam or even fraud.
- Hidden Costs: The program limits you to 150 OTPs per month, but you might still be charged for sending these texts, depending on your phone plan. The potential cost of international messages could easily outweigh the value of the free subscription.
- Limited Liability: Telegram absolves itself of any responsibility for damages arising from the program. Their terms of service state users "shall bear no liability" for any issues you might encounter.
- Enforceable Disengagement? Telegram advises users not to interact with people who receive OTPs from their numbers, but there's no way to guarantee compliance.
Telegram introduced its subscription service two years ago, offering various features for a fee.
Now, they're venturing into a territory that raises questions.
While the financial incentive might be tempting, is handing over your phone number to strangers worth the potential privacy risks and hidden costs?
The choice lies with you, but proceed with caution.