- Durov said an extortionist planted illegal content, prompting Apple to remove Telegram.
- The attacker edited an older message to evade Telegram’s AI filters and content hashes.
- Apple’s swift delisting could put other user-generated platforms at similar attack risk.
Telegram founder Pavel Durov said Apple briefly removed the messaging app from its global App Store after one user planted AI-modified illegal content in a public group. The service returned within hours after the material was removed.
Apple confirmed that its review found content violating rules against child sexual abuse material. It restored Telegram after the company deleted the content and banned the responsible user.
How Extortionists Bypass Telegram Moderation
Durov provided a more detailed account of the incident. He alleged that an extortionist deliberately planted the material to trigger action against Telegram. Apple has not publicly confirmed that part of his explanation.
Telegram uses reports, AI filters, content hashes, and other tools to find prohibited material in public groups. According to Durov, the attacker avoided these controls by editing an old message in an active chat.
The edited post allegedly contained AI-modified illegal material. Its position inside the chat history made the change difficult to notice. Durov said members could not see and report it quickly.
Durov described the user as a “takedown extortionist.” Such attackers demand payments from group owners. They threaten to target communities when administrators refuse to pay.
However, automated accounts are then used to place illegal content inside public groups, according to Durov. The attackers report it directly to Apple. Their aim is to trigger action against communities that rejected their demands.
Durov did not identify the alleged attacker or name the affected group. He also disclosed no ransom amount. His statement contained no details about a police report or other legal action.
Durov argued that the use of backdated, largely hidden content showed the issue was not systemic in Telegram’s public groups. Telegram says it has a zero-tolerance policy and has blocked 337,942 CSAM-related groups and channels so far in 2026.
Telegram Removal Raises App Store Risks
Durov criticized Apple for removing Telegram before contacting the company. He said this approach created a wider risk for mobile apps. Attackers could plant prohibited content to influence app-store enforcement decisions.
Telegram has more than one billion monthly active users. Existing users could still access the installed app during the delisting. However, new downloads were temporarily unavailable through Apple’s mobile marketplace.
The founder also warned that takedown tactics were evolving across social platforms. Telegram has experience identifying coordinated reporting gangs. Durov said other services might not have the same protections.
Apple previously removed Telegram from the App Store in 2018 over content described as inappropriate. The service returned after introducing additional safeguards. The latest removal again involved content posted by an individual user.
Related: Australia Takes Telegram to Court Over Alleged Terror Content Failures
Disclaimer: The information presented in this article is for informational and educational purposes only. The article does not constitute financial advice or advice of any kind. Coin Edition is not responsible for any losses incurred as a result of the utilization of content, products, or services mentioned. Readers are advised to exercise caution before taking any action related to the company.
