r/assholedesign • u/Fresh_Bumblebee_4165 • 5h ago
Telegram demands a Premium subscription just to receive an SMS recovery code for compromised accounts.
My Telegram account was compromised yesterday. The attacker logged out all my active sessions, enabled two-step verification (2FA), and linked a disposable recovery email.
I still have physical possession of the original SIM card and phone number. Naturally, I attempted to bypass the attacker's email by selecting the option to reset via SMS.
To my disbelief, Telegram blocked the request with an official prompt stating:
"Due to the high cost of SMS messages in your country, you must have a Telegram Premium subscription to reset your email with an SMS code."
The situation is absurd on multiple levels:
Paywalled Account Security: Telegram is literally holding basic recovery behind a paywall. A compromised user is told: "Pay for Premium, or you don't get your code."
Forced 3-Month Minimum: Since I am logged out, I cannot purchase a subscription myself. The app instructs me to have a friend gift it—where the absolute minimum gift duration is 3 months ($14.99).
The Deletion Trap: Trying to delete the account via my.telegram.org doesn't help because the confirmation code is sent INSIDE the Telegram app to the active session—meaning it goes directly to the hacker.
Non-existent Support: With a skeleton crew of ~30 engineers for nearly a billion users, tickets and official support channels are completely non-responsive.
Now, after repeated recovery attempts, the servers placed a 3-hour flood wait on my number.
Telegram markets itself as a privacy-focused, user-first platform, but when a real security incident happens, it operates like ransomware: locking out the legitimate owner and demanding payment just to deliver an SMS.



