Telegram: âThe dark web in your pocketâ
About nine months ago while researching a story, I found myself added to a large Telegram channel which was focused on selling drugs.
I was then added to one about hacking and then one about stolen credit cards.
I realised my Telegram settings had made it possible for people to add me to their channels without me doing anything. I kept the settings the same to see what would happen.
Within a few months, I had been added to 82 different groups.
I changed my settings to stop it, but now every time I log on I am treated to thousands of new messages across dozens of extremely active illegal groups.
The arrest of Telegramâs billionaire chief executive in France has ignited a debate about moderation on his app.
Pavel Durov has been charged for suspected complicity in allowing illicit transactions, drug trafficking, fraud and the spread of child sex abuse images to flourish on his site.
There is no doubt that criminality is happening on other social networks too, but my experiment hints at a broader problem that many in law enforcement have been concerned about for years.
Here is a flavour of some of the groups to which I have found myself added.
My Telegram app has become a one-stop shop for illegal goods, all without me actively searching for new sellers.
All the images were posted to the groups, and we have altered the names of the channels so as not to advertise them.
It is no wonder some people, like cyber-security podcaster Patrick Gray, have been describing Telegram for months as âthe dark web in your pocketâ.
The dark web is a part of the internet that can only be accessed using specialist software and knowledge. Ever since the launch of the Silk Road marketplace in 2011, there has been a steady conveyor belt of websites selling illegal goods and services.
Speaking about the shock arrest of Mr Durov, Mr Gray said on his podcast Risky Business that Telegram has been a haven for crime for a long time.
âWe are talking about child sexual abuse material, weâre talking about drug sales, weâre talking about absolutely dark web levels of criminality that theyâre just doing nothing about,â he said.
Criminals like the dark web because of the anonymity it provides â internet traffic is bounced around the world, obscuring peopleâs locations. Pinpointing who is behind certain usernames is extremely challenging.
Researchers at cyber-security company Intel471 say that âpre-Telegram this activity was predominantly done in online markets hosted using hidden dark web servicesâ but for lower-level, lesser-skilled cyber-criminals, âTelegram has become one of the most popular online destinationsâ.
The hacker group Qilin, which held NHS hospitals to ransom earlier this summer, notably chose to publish stolen blood test data on its Telegram channel before its dark web website. The deepfake service used to create fake nudes of schoolgirls in Spain and South Korea also runs its full service, including payment, on Telegram.
There is no doubt that some of this criminality is happening on other platforms as reported previously.
Some of the Telegram criminal channels I was added to seem to have a presence on Snapchat, for example, and drug dealers can be found on Instagram too, where deals are no doubt being made in private chats.
But drug dealers can often be seen advertising their Telegram channels on those other sites to funnel people to that platform.
In January, state police in Latvia set up a separate unit specialising in monitoring chat apps for drug trafficking and communication, and officials have named Telegram as a particular concern.
Child abuse material
Telegram says that its moderation is âwithin industry standardsâ, but this week we have seen evidence to the contrary related to an area of criminality far less visible (and one I did not search for) â child sexual abuse material.
On Wednesday, the BBC learned that while Telegram does respond to some takedown requests from police and charities, it is not participating in programmes aimed to proactively prevent the spread of images and videos of child sexual abuse.
The app is not a member of either the National Center for Missing and Exploited Children or the Internet Watch Foundation â both of which work with all major social networks to find, report and remove such material.
Not doing enough to police child sexual abuse material (CSAM) is one of the chief allegations from French prosecutors.
âAt the heart of this case is the lack of moderation and co-operation of the platform, in particular in the fight against crimes against children,â said Jean-Michel Bernigaud, the secretary general of French child protection agency Ofmin, on LinkedIn.
Telegram told the BBC it does proactively search for illegal activity, including child sexual abuse, on its site. It said undisclosed action was taken against 45,000 groups in August alone.
The press office did not respond to follow-up questions about this or anything else in this article.
In June Pavel Durov told journalist Tucker Carlson that he only employs âabout 30 engineersâ to run his platform.
Not co-operating with police
Moderation is only part of the problem for Telegram. Its approach to police requests to remove illegal content and pass on evidence is another criticism.
As Brian Fishman, a co-founder of Cinder, a software platform for trust and safety, posted: âTelegram is another level: it has been the key hub for Isis for a decade. It tolerates CSAM. Itâs ignored reasonable law enforcement engagement for years. Itâs not âlightâ content moderation; itâs a different approach entirely.â
Some might argue that Telegramâs privacy features mean that the company does not have much data about this activity to report to police. This is the case with ultra-private apps like Signal and WhatsApp.
Telegram offers users similar levels of privacy if they opt to create a âSecret Chatâ which uses the same end-to-end encryption that those apps do. It means the activity inside a conversation is completely private and not even Telegram itself can view the contents.
However, this function is not set as default on Telegram, and it seems that most of the activity on the app â including on those illicit channels I was added to â are not set as âsecretâ.
Telegram could read all content and pass it on to police if it wanted to, but it states in its terms and conditions that it does not.
âAll Telegram chats and group chats are private amongst their participants. We do not process any requests related to them,â the companyâs terms and condition read.
Telegramâs cold approach to law enforcement is something that I have been told about on the fringes of press events by frustrated police officers.
French authorities noted in their statements about Mr Durovâs charges that police there and in Belgium had historically an âalmost total lack of response from Telegram to legal requestsâ.
Authorities in other countries including Germany have been vocal about a lack of co-operation from the app over the removal of illegal content.
Freedom of speech
In spite of all the criticism against Telegramâs approach to moderation, there are some who are concerned that Mr Durovâs arrest is a troubling time.
Digital rights organisation Access Now says it is watching developments with great concern.
In a statement, the campaigners for an open internet said that Telegram is âno model for corporate responsibilityâ and that the group had criticised the app many times in the past.
Access Now warns, however, that âdetaining the staff of platforms that people use to exercise their rights to free expression and peaceful assembly, without demonstrable alignment with human rights principles, may result in over-censorship, and could further shrink civic spacesâ.
Telegram itself has repeatedly said that âit is absurd to claim that a platform or its owner is responsible for the abuse of that platformâ.
Elon Musk, fellow billionaire and owner of X (formerly Twitter), has condemned the arrest and described it as an attack on freedom of speech. He is calling for Mr Durov to be released.
So too are some of the criminals on the Telegram groups I am now a member of, with FreeDurov imagery being shared in English and Russian widely.