Telegram account recovery
Telegram New Login Detected — Was It You?
Tell us what you're seeing and we'll swap in the exact next step — recognize your own login in seconds, or lock the account down if it wasn't you.
I got a 'New login' service message from Telegram and it wasn't meA login code arrived by SMS but I never tried to log inSomeone is asking me to send them the code I just receivedIt was me — new phone, tablet, or Telegram WebI already tapped approve or entered a code, and now I'm unsureI can't tell whether the login was mine
Open Settings > Devices and end anything you don't recognizeOfficial Telegram steps only — we never ask for your number, login code, or cloud password.
Owner-only by design
Every step assumes it's your number and your account — no third-party access, ever.
Official channels only
Telegram's own apps, t.me, @SpamBot, and recovery email — no unofficial 'tools'.
Nothing to hand over
None of these steps require your code, cloud password, or number.
Phishing-aware
We name the 'send me the code' scam so you can spot it in the moment.
No credentials stored
This is guidance you carry out inside Telegram — we hold none of your data.
Confirm any step against Telegram’s own in-app menus. Enter a code only into a login you started yourself in the official app or on web.telegram.org; if a person, bot or unsolicited page asks for it, that is not Telegram.
Read the notice line by line
The login notice is genuine and harmless. It tells you four things, and each one decides your next step.
Telegramservice notifications
1New login. We detected a login into your account from a new device on 10 Nov at 03:12.
2Device: Telegram Web, Chrome 131, Windows
3Location: Amsterdam, Netherlands
4If this wasn’t you, go to Settings › Devices and terminate that session.
- 1When it happenedMatch the time against the last time you signed in on a new phone, tablet, laptop or browser. A time when you were asleep is a red flag.
- 2Which app and systemTelegram Web or Desktop you never opened, or Android when you only use an iPhone, means it wasn’t you.
- 3Approximate locationIt is worked out from the IP address, so it can show a nearby city, your mobile operator’s hub, or a VPN’s country. An unfamiliar country is a clue, not proof; weigh it together with the device and app.
- 4What it asks you to doOnly to check Devices. The real notice never asks you to reply, open a link or send a code. A message that does is a scam, not the notice.
The genuine notice comes from the verified “Telegram” service account, which has no phone number. Wording and layout differ slightly between apps.
How it works
- 1Read the login notice in fullOpen the 'New login' service message from the official Telegram account and note the device, app, and location.
- 2Decide: was this you?Match the details against your own phones, tablets, and any Telegram Web or Desktop you keep open.
- 3Terminate the unknown sessionSettings > Devices > tap the session > Terminate, or use 'Terminate All Other Sessions' to clear everything but this device. On a device you signed in on less than 24 hours ago the button is unavailable; use an older device or wait.
- 4Set or change your cloud password (Two-Step Verification)Settings > Privacy and Security > Two-Step Verification — set a fresh password so a new login can't complete without it.
- 5Confirm the recovery-email hintOn the cloud-password screen, check the masked email hint still points to an inbox only you control.
- 6Re-check the device listReopen Settings > Devices and confirm every remaining session is one of yours.
The notice carries no countdown — but terminate first if anything is unrecognized; every extra minute a session stays live is time it can read your cloud chats.
Dead ends and the way forward
Tempting shortcuts that lead nowhere — and the official path that actually works
✗ Sending your login code to 'Telegram support' so they can 'cancel' the intruder's loginThat code IS the intruder's way in — 'support' asking for it is the attacker, and Telegram never requests your code.
→ Never send the code. End the session in Settings > Devices and set a cloud password yourself.
✗ Looking for a tool to 'remove' or 'bypass' a Two-Step Verification passwordNo such tool exists; the cloud password is built so even Telegram can't reveal or bypass it — you set your own, you don't extract anyone's.
→ If it’s YOUR password: use “Forgot password” to get a code at your recovery email. Still signed in on another device? Reset the password there; Telegram makes you wait but keeps the account. Only when you are fully signed out with no recovery email is the account reset left, and it deletes the account.
✗ Trying to intercept the SMS code sent to a number that isn't yoursThat is SIM-swap and OTP interception against another person's account — the exact takeover method this site refuses to help with.
→ Secure only your own number: ask your carrier about SIM/port-out protection and set a Telegram cloud password.
✗ Deleting your account in a panic to 'lock out' the intruderThe account reset deletes the account AND all its cloud chats, so you destroy exactly what the intruder was after.
→ Terminate their session and set a cloud password; that ejects them while keeping your account intact.
✗ Waiting for the intruder to get bored and log out on their ownAn active session stays live indefinitely — it can read cloud chats, add its own 2FA, and lock you out first.
→ End the session yourself in Settings › Devices from a device that has been signed in for more than a day. It ends the moment you tap.
✗ Messaging the phone number or username shown in the login location to confront themLogin location is approximate and easily spoofed; contacting a stranger removes no access and isn't safe.
→ Ignore who — focus on what: kill the session and add a cloud password.
We do
- ✓ Walk you through terminating sessions on YOUR own account
- ✓ Show the official path to set or reset your own cloud password
- ✓ Explain how to read a genuine 'new login' notice
- ✓ Point you to @SpamBot, the recovery email, and [email protected]
- ✓ Teach you to recognize 'send me the code' phishing
We never
- ✗ Ask for, intercept, or 'retrieve' any login code — ever
- ✗ Bypass, remove, or reveal a Two-Step Verification password
- ✗ Help access, monitor, or read an account that isn't yours
- ✗ Perform SIM-swaps or SMS/OTP interception
- ✗ Promise recovery of deleted or self-destructed accounts
Everything here re-secures the visitor's OWN Telegram account through Telegram's own apps and channels. An unrecognized login routes you to locking your account down — never toward reaching into anyone else's.
FAQ
Is the 'new login detected' message from Telegram itself a scam?
No — the service message from the official 'Telegram' account (blue checkmark, no phone number) is genuine and purely informational. What can be a scam is any follow-up that asks you to share the code or 'confirm' the login. Read the listed device and location, and if you didn't start it, terminate that session in Settings > Devices and set a cloud password.
The login shows a location I've never been to — does that mean I'm definitely hacked?
Not necessarily. Login location is derived from IP and is only approximate; VPNs and carrier routing can throw it off by cities or countries. Judge by the device and app instead. If you still can't place it, treat it as unrecognized: terminate that session, then turn on Two-Step Verification.
Someone says they're Telegram support and need the code to stop the hacker — can you help me get back in through them?
That message is the attack, and we won't help with anything beyond your own account. Telegram never asks for your login code, and 'support' requesting it is impersonation — the code is exactly what hands them your account. Don't send it. On your own device, open Settings > Devices, terminate every session you don't recognize, then set a cloud password. We never obtain or intercept codes, bypass 2FA, or touch any account but yours.
In what order does the login code arrive, and why does that matter?
Telegram usually sends the code to your other signed-in devices first, in the “Telegram” chat. If none is available, use the delivery options your login screen offers, such as SMS, a call or email. If a code turns up while you have no login open, someone has entered your number. The code grants nothing until it’s shared, so ignore it and check your active sessions.
I forgot my cloud password and now there's a strange login — what are my options?
On the cloud-password screen, tap “Forgot password” to get a recovery code at your recovery email (a masked hint of the address is shown there). If no recovery email was set but one of your devices is still signed in, reset the password from that device; Telegram makes you wait but keeps the account. Only when you are signed out with no recovery email is the account reset left. The account reset deletes the account and its cloud chats. Depending on the account, Telegram either makes you wait (often 7 days) or deletes it straight away; follow what the screen shows.
Will setting a cloud password kick out the device that just logged in?
No — Two-Step Verification stops future logins from completing without the password, but it doesn't end sessions that are already active. To remove the current intruder, terminate their session in Settings > Devices first, then add the cloud password so they can't log back in.
Topic
Hacked & suspicious logins
Account hackedSomeone else is in, or changed your number or passwordStart here
New login detectedTelegram warned you about a sign-inYou are here
Active sessions & devicesSee and end every logged-in device“Send me the code” scamSomeone asked you to share a login codeCaught it early? Then you're ahead.
A 'new login' notice is the earliest warning Telegram gives you. If it wasn't you, the fix is fast and entirely in your hands: end the unknown session, then set a cloud password so the next attempt can't complete. Do it on your own device, through Telegram's own menus — no codes to share, no tools to install.
Terminate unknown sessions now