The instant messaging application Telegram allows some users to benefit from a Premium account in exchange for their phone number as a relay, but not without risks.
5.49 euros per month. This is the price of subscribing to the Premium service of the Telegram instant messaging application. Packed with options and benefits, this paid plan propels Pavel Durov’s social network to the rank of the most downloaded and used applications, with 700 million active monthly users in 2022.
But controversy is never far from such a success story. And so after being banned in Brazil in 2023 by its Minister of Justice and in Spain by the High Court, according to Reuterssince this Monday, March 25, 2024 (suspension lifted this Tuesday, March 26, 2024), Telegram is once again causing controversy.
A new service allowing certain users to benefit from a free Premium account in exchange for… the use of their telephone number as a relay is being deployed in certain countries. Enough to question the security and confidentiality conditions of the application.
The telephone number as an SMS relay
This feature offers users the opportunity to get a free premium subscription in exchange for allowing the app to use their phone number as a relay for sending one-time SMS passwords to others users trying to connect to the platform.
As stated in the Telegram T&Cs, “ Users register and log in to Telegram by receiving a verification code (“OTP”) sent via SMS. These messages are sent by business SMS operators which, depending on region and other factors, have varying degrees of reliability “.
In order to ensure reliable receipt of OTPs for all users, Telegram has implemented a peer-to-peer connection program. This program allows users of the Telegram Android application to offer their phone number as a relay for connection codes via SMS, in exchange for a subscription to Telegram Premium in the form of a transferable code.
“ In return for your active participation in the P2PL program, Telegram will reward you with a monthly subscription to Telegram Premium each time you reach a quota of successfully sent SMS messages. », Explain the T&Cs.
The user who owns this number serving as a relay acts as a subcontractor and obtains a free premium subscription in the process.
Risks to security, privacy and… user wallets
If on paper, the offer may seem attractive, when we look at the fine print of Telegram’s T&Cs, reality takes a different turn. Already strongly criticized in the past by the boss of its competitor WhatsApp, Bill Cathcart, over its security, Telegram risks attracting a new wave of criticism.
Indeed, the application’s T&Cs define the precise rules for access to this free Premium subscription. And they are largely passed on to the user.
To begin with, even though Telegram offers the option to hide your phone number from strangers, using your number as a relay can compromise the security of your account.
Here again, Telegram disclaims responsibility. “ Telegram cannot prevent the OTP recipient from seeing your phone number when they receive your SMS. You therefore acknowledge and agree that you have considered all potential repercussions that this may cause and have taken the necessary precautions to mitigate them as you see fit. Therefore, you understand and agree that Telegram will not be responsible for any inconvenience, harassment or harm resulting from unwanted, unauthorized or illegal actions taken by users who have become aware of your telephone number through P2PL “.
Second, there is a significant privacy risk because it allows malicious individuals to seek out and potentially exploit users’ phone numbers for spam and fraud.
Finally, we note that the telephone number can be used up to 150 times per month, and at the expense of its owner.
“ By joining the P2PL program, [….] you understand and agree that SMS messages sent from your number under the P2PL Program may be subject to charges from your wireless carrier or service provider. You expressly agree to bear these charges, including, but not limited to, carrier rates, surcharges and any international SMS charges that may apply from time to time », It is specified. In some cases, these fees could significantly exceed the value of the Premium subscription.
If it’s free, you’re the product.
Source : TechCrunch, Telegram
4