# Telegram Account Hacked? How to Get It Back in Malaysia > Telegram hacked in Malaysia? How to end the attacker's sessions in Devices, handle a 2-Step Verification password they set, and what to do if logged out. - URL: https://www.awarexone.com/research/telegram-account-hacked-malaysia - Author: Md Shariar Shanaz Shuvon, Founder & CEO, AwareXone - Published: 2026-09-29 - Topics: Telegram, Account recovery, Malaysia - Related service: Telegram account recovery: https://www.awarexone.com/social-media-recovery/telegram-account-recovery ## Short answer If you are still logged in anywhere, go to Settings, then Devices, end every unknown session, and turn on 2-Step Verification with a recovery email you control. If you are logged out everywhere, get your SIM back from your carrier, then use Telegram's login help form. Never share a login code. Telegram makes the final call. ## Summary - If you are still logged in on any device, end every session you do not recognise under Settings then Devices, then turn on 2-Step Verification with a recovery email you control. - If the attacker set their own 2-Step Verification password, your options are a 7-day reset from a logged in device, a recovery code to your own email, or deleting the account. - If you are logged out everywhere, get your SIM back from your carrier first, then use Telegram's login help form. - Your Telegram login code arrives only in the official Telegram chat or by SMS. Nobody legitimate will ever ask you to forward it or read it out. - If money was lost or you shared a code with a scammer, call the National Scam Response Centre on 997 and your bank, then make a police report. - Telegram makes the final call, and an account with an unknown password and no other logged in device may not come back. Your friends are asking why you sent them a strange link. Or Telegram logged you out, and when you try to log back in it asks for a password you never set. Someone else is inside your account, reading your chats and messaging your contacts as you. Move fast, but in the right order. If any of your devices is still logged in, you can throw the attacker out from Settings. If you are logged out everywhere, the path runs through your phone number and Telegram's login help, and it is slower. This guide covers both cases, what to do when the attacker has set a 2-Step Verification password, and how the takeover probably happened. Last checked: 29 September 2026. ## What Should You Do If Your Telegram Account Is Hacked? On any device where you are still logged in, go to Settings, then "Devices" (on some versions, Privacy and Security, then "Active Sessions") and end every session you do not recognise. Telegram's [FAQ](https://telegram.org/faq) gives this exact route for a stolen phone. Then turn on 2-Step Verification with a recovery email you control. If you are logged out everywhere, get your SIM back from your carrier and use Telegram's [login help form](https://telegram.org/support). Never share a login code. In Malaysia, if money was lost or a code was shared, call 997 and your bank first. ## Which Situation Are You In? Your options depend on two things: whether any of your devices is still logged in, and whether the attacker has set a password. Find your row, then go to the section that matches. *Common signs of a Telegram takeover and the first step for each, at the time of writing. Screen labels vary by app version and platform.* | What you see | What it usually means | What to do first | | --- | --- | --- | | You are still logged in, and Devices shows a session you do not know | Someone logged in with a code and is using the account alongside you | End that session now, then set up 2-Step Verification | | You are logged out, and the login screen asks for a password you never set | The attacker turned on 2-Step Verification to lock you out | See the section on an attacker's password below | | The login code never reaches you by SMS | The code may be going to another logged in device, or your SIM may have been moved | Check your SIM works for calls and texts; if not, call your carrier | | You can read chats but cannot send, and the app says the account is frozen or limited | The account was reported, possibly for spam the attacker sent | Secure the account first, then appeal in the app or through @SpamBot | | Your number now opens an empty, new account | The old account may have been deleted | Telegram says deletion cannot be reversed; warn contacts and start again | ## Still Logged In Somewhere? Remove the Intruder in Five Steps This is the best position to be in. Telegram accounts are tied to active sessions, and ending a session logs that device out. Do these in order, on the device you trust most: 1. Open Settings, then "Devices". Look at each session's device name, location and last active time. End every one you do not recognise. If you are unsure, end all sessions except the one in your hand. 2. Open Settings, Privacy and Security, then 2-Step Verification. If it is off, turn it on and set a password you have never used anywhere else. Telegram's FAQ says you will then need both the code and the password to log in. 3. Add a recovery email you control and protect that inbox with its own strong password and two-step login, as Telegram's FAQ advises. If 2-Step Verification is already on and you did not set it, see the next section. 4. Open Privacy and Security, then Passkeys. Telegram says this list shows when each passkey was created and last used. A passkey you did not create lets someone log in without an SMS code, so remove it if the app gives you the option. 5. Check the phone number on your profile. If it has changed, change it back under Settings, then your phone number, then "Change Number", as the FAQ describes. ## The Attacker Set a 2-Step Verification Password. Now What? An attacker may switch on 2-Step Verification the moment they get in, using their own password and email. Your way back depends on what you still have. Telegram's developer documentation on [two-factor authentication](https://core.telegram.org/api/srp) lists three recovery routes for a forgotten password. - You are still logged in on a device: you can ask for a password reset from that session. Telegram starts a 7-day timer before the reset goes through, and the documentation says a button from the Telegram service account can cancel it during that time. If the attacker is still logged in, they may see that button too, so end their sessions first. - The recovery email is yours: Telegram can send a recovery code to that email, even from the login screen once you have entered the login code. - You are logged out and the recovery email is theirs: the documented option is deleting the account, which needs the login code. You keep the phone number but lose your chats, contacts and groups. That last route hurts, but it does end the attacker's access. Telegram's FAQ says deletion is irreversible and you will appear to contacts as a new user, so try the login form first. ## Telegram Kena Hack, Tak Boleh Login: When You Are Logged Out Everywhere Being logged out on every device is harder, because Telegram identifies you by your phone number and little else. The FAQ puts it plainly: whoever has the number has the account, and Telegram cannot help unless you have the number or a logged in device. 1. Make sure your SIM works. If calls and texts have stopped, your number may have been moved to another SIM. Call your carrier, ask them to block the old SIM and issue a replacement with your number, as Telegram's FAQ advises for a stolen phone. 2. Try to log in again with the number in full international format, starting +60. The code may arrive by SMS, or in the "Telegram" chat on another device if you still have one logged in. 3. If you hit an unknown password, use the routes in the section above. 4. If login keeps failing, use Telegram's [support form](https://telegram.org/support) and describe the problem in a few plain sentences: your number, what you see, and when it started. 5. Telegram's FAQ also names @SmsTelegram on X as its official account for login problems, and says it has no other support accounts on social media. Treat every other "Telegram support" profile as fake. If the takeover began with your SIM being moved, your WhatsApp and bank SMS codes are at risk too. Our guide to [WhatsApp takeovers through stolen verification codes](https://www.awarexone.com/research/whatsapp-hacked-verification-code-malaysia) covers that side. ## How Did the Attacker Get In? Most Telegram takeovers do not involve clever code. The attacker gets you to hand over the login code, then logs in on their own device. Telegram's FAQ says codes for your own account arrive in the verified service notifications chat named "Telegram", with a blue check, and should never be shared with anyone. The developer documentation on [user authorisation](https://core.telegram.org/api/auth) adds a useful detail: Telegram's servers automatically cancel a login code if you forward it or send it in a chat. That is one likely reason scammers ask you to type the code into a web page or read it out on a call instead. Scripts that commonly reach Malaysian users, in English, BM or Chinese, look like these: - A friend's account (already hacked) says: "Sorry, I sent a code to your number by mistake, can you tell me what it says?" or "Tersalah hantar kod, boleh bagi balik?" - A "vote for my child in a contest" link that opens a page asking for your Telegram number and then the code. - An offer of free Telegram Premium, a giveaway or a paid "task" job, all needing you to confirm your account on an outside site. - A message claiming to be Telegram support, saying your account will be deleted unless you verify it. Telegram's [Terms of Service](https://telegram.org/tos) say that messages from the Telegram team about a Premium account come through verified service accounts inside the app. A Premium offer through a link from a stranger is not one of them. If the attacker spammed strangers from your account, it may now be limited. Telegram's [Spam FAQ](https://telegram.org/faq_spam) says a limited account can still message people who saved your number and reply to anyone who writes first, and that you can contact @SpamBot if you believe the limit is wrong. Our guide to [Telegram numbers that are banned](https://www.awarexone.com/research/telegram-phone-number-banned) covers the stricter cases. ## Warn Your Contacts and Report the Impersonation While the attacker had your account, they probably messaged your contacts and groups. Once you are back in, or from another channel if you are not: - Post one short message in your main groups and family chats: your account was taken over, do not send codes or money, and ignore requests from it sent after a certain time. - Check your sent messages and delete any scam messages you can find. Telegram's FAQ says you can delete messages for both sides in one-to-one chats. - If a separate fake account is pretending to be you, Telegram's FAQ says to contact @NoToScam. ## If Money Was Lost or a Code Was Shared in Malaysia A takeover often comes with fraud: friends send money to the attacker, or your own banking codes are caught along the way. The Malaysian government's page on the [NSRC 997 hotline](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) says to call 997 within 24 hours of discovering a scam, contact your bank, and make a police report at the nearest station. For the hacking itself, CyberSecurity Malaysia's [Cyber999 service](https://www.cybersecurity.my/portal-main/services/cyber999-overview) is the national point of contact for computer security incidents. MyCERT's [reporting channel page](https://www.mycert.org.my/portal/full?id=9eb77829-7dd4-4180-814f-de3a539b7a01) lists an online form, email to cyber999@cybersecurity.my and the 1-300-88-2999 line during office hours. ## Mistakes That Make a Telegram Takeover Worse - Logging out of your last working device to "start fresh". That device may be your only way to end the attacker's sessions or reset their password. - Deleting the account in a panic before trying the recovery email, the login form and your carrier. - Asking a "recovery expert" in a Telegram group to help. Anyone who asks for your code, password or recovery email is trying to take the account, not return it. - Paying a "hacker for hire" to break back in. It is a common scam, and breaking into an account is not a legal recovery route. > Warning: **No real helper needs your code.** Telegram's own staff, your carrier, the police and any honest recovery service can all do their part without your login code, 2-Step Verification password or recovery email access. If someone asks for any of these, stop replying. If you have already shared a code or paid, call 997 and your bank now. ## Lock It Down So It Does Not Happen Again Once you are back in, a short setup keeps the next attempt out. Telegram's FAQ recommends 2-Step Verification and an app passcode, both under Settings, Privacy and Security. - 2-Step Verification on, with a unique password stored in a password manager. - A recovery email with its own strong password and two-step login. - A passkey on the phone you use most, which Telegram says can replace the SMS code. - A monthly look at Devices to end sessions you no longer use. - Your phone number kept current. Telegram warns that losing the connected number can mean losing the account. To plan for a phone change, see our guide to [recovery when you lose your email, phone or 2FA](https://www.awarexone.com/research/lost-email-phone-2fa-account-recovery). > Note: **Telegram decides.** Only Telegram can restore access to a Telegram account. Support relies partly on volunteers, according to its FAQ, so replies can be slow. An account with an attacker's password, an attacker's recovery email and no other logged in device may not come back. ## When Expert Recovery Help Makes Sense Most people can work through the steps above alone. A second opinion helps when the account runs a business channel or community, when a SIM swap is tangled up in the takeover, or before you choose account deletion. SocialSafe by AwareXone, our recovery service, reviews the situation first and tells you plainly which official route is still open, if any, and never asks for your login code or password. The [recovery hub](https://www.awarexone.com/all-types-of-social-media-problem-solutions) explains how a review works, and our [Trust Center](https://www.awarexone.com/trust) lists what we will not do. For other platforms, see our overview of [social media account recovery in Malaysia](https://www.awarexone.com/research/social-media-account-recovery-malaysia). ## Frequently Asked Questions ### How do I log out a hacker from my Telegram account? Open Settings, then Devices, and end every session you do not recognise, or all other sessions. Then turn on 2-Step Verification so the attacker cannot log back in with a code alone. ### Can I recover my Telegram account without my phone number? Only if you are still logged in on another device. Telegram's FAQ says the phone number is the only way it identifies you, so if you have neither the number nor a logged in device, it cannot help. Get the number back from your carrier first. ### Why is Telegram asking for a password I never set? The attacker probably turned on 2-Step Verification with their own password. If you still have a logged in device, you can request a password reset there, which takes 7 days. Otherwise the recovery email decides what is possible. ### Is it safe to share my Telegram code with a friend who sent it by mistake? No. Telegram login codes should never be shared with anyone, and a friend asking for one is usually a hacked account. Their message is the start of the same takeover that happened to them. ### Does Telegram have a support number I can call in Malaysia? Telegram's FAQ lists in-app support (Settings, then Ask a Question), a login help form, and @SmsTelegram on X. It says it has no other support accounts on social media, so any other "Telegram agent" is fake. ### Should I report a hacked Telegram account to the police in Malaysia? Yes if money was lost or someone used your account to cheat others. Call 997 and your bank first, then make a police report. You can also report the incident to CyberSecurity Malaysia's Cyber999. ## Official sources - [Telegram FAQ (read 29 September 2026)](https://telegram.org/faq) - [Telegram: Support form (read 29 September 2026)](https://telegram.org/support) - [Telegram: Spam FAQ (read 29 September 2026)](https://telegram.org/faq_spam) - [Telegram: Terms of Service (read 29 September 2026)](https://telegram.org/tos) - [Telegram API documentation: Two-factor authentication (read 29 September 2026)](https://core.telegram.org/api/srp) - [Telegram API documentation: User authorization (read 29 September 2026)](https://core.telegram.org/api/auth) - [MyGOV Malaysia: NSRC 997 Hotline (read 29 September 2026)](https://www.malaysia.gov.my/en/categories/safety-and-community/cybersecurity/nsrc-997-hotline) - [CyberSecurity Malaysia: Cyber999 Cyber Incident Response Center (read 29 September 2026)](https://www.cybersecurity.my/portal-main/services/cyber999-overview) - [MyCERT: Reporting Channel (read 29 September 2026)](https://www.mycert.org.my/portal/full?id=9eb77829-7dd4-4180-814f-de3a539b7a01) --- AwareXone is an independent Malaysia-based provider, not affiliated with any platform. The platform makes the final decision on every account. AwareXone never asks for passwords, OTP codes, backup codes or session cookies.