Telegram account recovery
Telegram New Login Detected — Was It You?
Tell us what you're seeing and we'll swap in the exact next step — recognize your own login in seconds, or lock the account down if it wasn't you.
I got a 'New login' service message from Telegram and it wasn't meA login code arrived by SMS but I never tried to log inSomeone is asking me to send them the code I just receivedIt was me — new phone, tablet, or Telegram WebI already tapped approve or entered a code, and now I'm unsureI can't tell whether the login was mine
Open Settings > Devices and end anything you don't recognizeOfficial Telegram steps only — we never ask for your number, login code, or cloud password.
Owner-only by design
Every step assumes it's your number and your account — no third-party access, ever.
Official channels only
Telegram's own apps, t.me, @SpamBot, and recovery email — no unofficial 'tools'.
Nothing to hand over
None of these steps require your code, cloud password, or number.
Phishing-aware
We name the 'send me the code' scam so you can spot it in the moment.
No credentials stored
This is guidance you carry out inside Telegram — we hold none of your data.
Confirm any step against Telegram's own in-app menus; if a page or person asks for your code, it is not Telegram.
How it works
- 1Read the login notice in fullOpen the 'New login' service message from the official Telegram account and note the device, app, and location.
- 2Decide: was this you?Match the details against your own phones, tablets, and any Telegram Web or Desktop you keep open.
- 3Terminate the unknown sessionSettings > Devices > tap the session > Terminate, or use 'Terminate All Other Sessions' to clear everything but this device.
- 4Set or change your cloud password (Two-Step Verification)Settings > Privacy and Security > Two-Step Verification — set a fresh password so a new login can't complete without it.
- 5Confirm the recovery-email hintOn the cloud-password screen, check the masked email hint still points to an inbox only you control.
- 6Re-check the device listReopen Settings > Devices and confirm every remaining session is one of yours.
The notice carries no countdown — but terminate first if anything is unrecognized; every extra minute a session stays live is time it can read your cloud chats.
Dead ends and the way forward
Tempting shortcuts that lead nowhere — and the official path that actually works
✗ Sending your login code to 'Telegram support' so they can 'cancel' the intruder's loginThat code IS the intruder's way in — 'support' asking for it is the attacker, and Telegram never requests your code.
→ Never send the code. End the session in Settings > Devices and set a cloud password yourself.
✗ Looking for a tool to 'remove' or 'bypass' a Two-Step Verification passwordNo such tool exists; the cloud password is built so even Telegram can't reveal or bypass it — you set your own, you don't extract anyone's.
→ If it's YOUR password and you forgot it, use the recovery email; with no email, only the destructive account reset remains.
✗ Trying to intercept the SMS code sent to a number that isn't yoursThat is SIM-swap and OTP interception against another person's account — the exact takeover method this site refuses to help with.
→ Secure only your own number: ask your carrier about SIM/port-out protection and set a Telegram cloud password.
✗ Deleting your account in a panic to 'lock out' the intruderThe 7-day account reset deletes the account AND all its cloud chats — you destroy exactly what the intruder was after.
→ Terminate their session and set a cloud password; that ejects them while keeping your account intact.
✗ Waiting for the intruder to get bored and log out on their ownAn active session stays live indefinitely — it can read cloud chats, add its own 2FA, and lock you out first.
→ Terminate the session yourself in Settings > Devices — it takes effect the instant you tap it.
✗ Messaging the phone number or username shown in the login location to confront themLogin location is approximate and easily spoofed; contacting a stranger removes no access and isn't safe.
→ Ignore who — focus on what: kill the session and add a cloud password.
We do
- ✓ Walk you through terminating sessions on YOUR own account
- ✓ Show the official path to set or reset your own cloud password
- ✓ Explain how to read a genuine 'new login' notice
- ✓ Point you to @SpamBot, the recovery email, and [email protected]
- ✓ Teach you to recognize 'send me the code' phishing
We never
- ✗ Ask for, intercept, or 'retrieve' any login code — ever
- ✗ Bypass, remove, or reveal a Two-Step Verification password
- ✗ Help access, monitor, or read an account that isn't yours
- ✗ Perform SIM-swaps or SMS/OTP interception
- ✗ Promise recovery of deleted or self-destructed accounts
Everything here re-secures the visitor's OWN Telegram account through Telegram's own apps and channels. An unrecognized login routes you to locking your account down — never toward reaching into anyone else's.
FAQ
Is the 'new login detected' message from Telegram itself a scam?
No — the service message from the official 'Telegram' account (blue checkmark, no phone number) is genuine and purely informational. What can be a scam is any follow-up that asks you to share the code or 'confirm' the login. Read the listed device and location, and if you didn't start it, terminate that session in Settings > Devices and set a cloud password.
The login shows a location I've never been to — does that mean I'm definitely hacked?
Not necessarily. Login location is derived from IP and is only approximate; VPNs and carrier routing can throw it off by cities or countries. Judge by the device and app instead. If you still can't place it, treat it as unrecognized: terminate that session, then turn on Two-Step Verification.
Someone says they're Telegram support and need the code to stop the hacker — can you help me get back in through them?
That message is the attack, and we won't help with anything beyond your own account. Telegram never asks for your login code, and 'support' requesting it is impersonation — the code is exactly what hands them your account. Don't send it. On your own device, open Settings > Devices, terminate every session you don't recognize, then set a cloud password. We never obtain or intercept codes, bypass 2FA, or touch any account but yours.
In what order does the login code arrive, and why does that matter?
Telegram sends the code to an existing logged-in session first (as an in-app service message), then by SMS, then by phone call if needed. It matters because if a code turns up by SMS or call while you have no login open, someone has entered your number — the code grants nothing until it's shared, so ignore it and check your active sessions.
I forgot my cloud password and now there's a strange login — what are my options?
On the cloud-password screen, tap 'Forgot password' to send a reset link to your recovery email (a masked hint of that address is shown right there). If no recovery email was ever set, the only path is Telegram's account reset, which deletes the account and its cloud chats after a waiting period of 7 days or more — a genuine last resort, not a quick fix.
Will setting a cloud password kick out the device that just logged in?
No — Two-Step Verification stops future logins from completing without the password, but it doesn't end sessions that are already active. To remove the current intruder, terminate their session in Settings > Devices first, then add the cloud password so they can't log back in.
Caught it early? Then you're ahead.
A 'new login' notice is the earliest warning Telegram gives you. If it wasn't you, the fix is fast and entirely in your hands: end the unknown session, then set a cloud password so the next attempt can't complete. Do it on your own device, through Telegram's own menus — no codes to share, no tools to install.
Terminate unknown sessions now