Scammers run Telegram channels and groups that look like crypto “VIP signals,” exchange support desks, or airdrop bots. The endgame is a wallet drain: you connect a wallet to a malicious dApp, approve a token spend, paste a seed phrase into a “verification bot,” or send coins to an address that will never send anything back. Telegram itself is a real messaging app; the scam is the channel, the bot, or the connect-wallet link—not the App Store listing.
This guide is Telegram-drain–specific. Celebrity doubling pitches: Fake cryptocurrency giveaway scams. Mint-page approvals: Fake NFT mint-fee scams. Broader login theft: Phishing and account takeover. Landscape: Credit and debt scams.
How Telegram wallet drains work
| What you see | What is actually happening |
|---|---|
| “VIP signals” channel with fake PnL screenshots and paid entry | Recruitment funnel; paid entry funds the operator, not a trading desk |
| Bot asks you to “verify wallet” by pasting a 12/24-word seed or private key | Instant theft of every asset that seed controls |
| “Connect wallet to claim airdrop / unlock withdrawal” link | Malicious contract approval that drains tokens (and sometimes NFTs); full airdrop-claim playbook: Fake crypto airdrop scams |
| Fake Binance, Coinbase, Kraken, or MetaMask “support” in Telegram DMs | Impersonation; real support is inside official apps/sites, not cold DMs |
| Admin mutes skeptics and pushes urgency (“window closes in 10 minutes”) | Social proof theater; exits get blocked until you send more |
Legitimate exchanges (Coinbase, Kraken, Fidelity Crypto where available, major bank crypto desks) do not require you to paste a seed phrase into Telegram to “unstake,” “clear a tax hold,” or “upgrade your account.”
Common Telegram drain scripts
- Signal / VIP group upsell. Free channel posts winning trades. A bot DMs you a paid tier. After you pay in USDT or BTC, “admins” demand more for “liquidity,” “gas,” or “AML clearance”—classic advance-fee layering next to giveaway scams.
- Seed-phrase “verification.” Any request for your recovery phrase is theft. Hardware wallets (Ledger, Trezor) and software wallets never need the phrase typed into a chat bot.
- Wallet-connect / approve-all drains. You tap a Telegram deep link, open a lookalike site, connect MetaMask or Phantom, and approve unlimited token allowance. Minutes later balances hit zero—same family as NFT mint-fee drains.
- Fake job / task bots. “Crypto engagement jobs” pay tiny first tasks, then require a “security deposit” or wallet connect to cash out.
- Recovery-after-drain second sting. After the first loss, a new “investigator” on Telegram offers retrieval for a fee—see Fake crypto recovery scams.
Worked example
Devon joins a Telegram channel “ETH Alpha Desk — 312k members.” A bot sells a $250 USDT VIP seat. After paying, an “account manager” says Devon’s withdrawal is frozen until he posts a $1,800 “collateral” and connects MetaMask to a “compliance portal.” Devon almost pastes his seed into the bot. Healthy path: he refuses seed and connect-wallet asks, revokes any prior allowances on a trusted revoke tool from a bookmarked URL, moves remaining funds to a fresh wallet, and reports the channel via Telegram’s in-app tools plus ReportFraud.ftc.gov and IC3.gov. He does not hire a Telegram “recovery agent.”
Hard rules that prevent most losses
- Never paste a seed phrase, private key, or authenticator code into Telegram, a bot, or a link from a DM.
- Treat paid “signal” groups that require crypto entry fees as high-risk marketing, not regulated advice.
- Open exchange apps from official bookmarks; ignore Telegram “support” that cold-DMs you first.
- For any wallet connect, read the approval (spender address, unlimited allowance) and prefer hardware-wallet confirms you initiated yourself.
- If a contact’s Telegram suddenly pitches a hot tip, verify on a known phone call—account takeovers happen here too (Phishing and account takeover).
If you already connected a wallet or paid
- On a clean device, move remaining assets to a new wallet whose seed never touched Telegram; assume the old seed is burned if it was typed anywhere.
- Revoke token allowances from a revoke site you typed yourself (not a Telegram link).
- Contact your exchange’s official support only through the app/site for account freezes; document TXIDs.
- File reports at ReportFraud.ftc.gov and IC3.gov; tell your bank if fiat on-ramps were involved.
- Refuse second-fee “recovery” pitches; gift-card or wire “unstake” fees are almost always a second loss (Gift cards and prepaid debit risks).
Checklist
- Leave or mute channels that demand seed phrases, deposits, or urgent wallet connects.
- Never pay Telegram “VIP,” “gas,” or “AML” fees to unlock your own money.
- Bookmark official exchange and wallet URLs; ignore DM links.
- Review token approvals after any experimental connect.
- Warn friends on another channel if your Telegram was used to pitch them.
- Report the channel/bot even when you walked away.
Educational only. Not legal, security, investment, or fraud-recovery advice. Scam tactics and chain mechanics change; verify contacts through official apps and statements.