Telegram: how the bots work and what stays on the record

What disappears when a channel is closed is the link. The server, the customer base and the tariff stay where they were, so opening a replacement under a similar name is a few minutes of work. That is why lists of channels go stale so quickly, and why the audience does not shrink when one is taken down.

The scale has been measured. Graphika's report on synthetic intimate-image services recorded that 52 Telegram groups used to access such services held at least one million users in September 2023, alongside 34 provider websites with more than 24 million unique visitors that month. Those figures explain why closing a single channel changes nothing: what closes is a door, not the building.

An account. Not a company, not an office address, not a business registration number. There is no document readable before the transaction, so there is no promise to hold anyone to: not about how long a file is kept, not about whether the result is reused, not about who is allowed to look at the queue.

This difference is not a matter of taste. If a service writes its rules at a fixed address, you can save the page and demand what it says. If the rules exist only in a chat bubble that either side can delete, there is nothing left to demand. Installer files circulating under the same name have the mirror image of this problem, and both are set against what the official stores permit in the page on what the stores allow.

A crypto payment is final once the network confirms it. No card issuer can hold the funds, no dispute can be raised, and no recipient's name can be written into a complaint. That is why this format chooses crypto, and not for any technical reason. For anyone paying from the Philippines the gap is sharper still, because a GCash or Maya transfer at least leaves a named sender and a traceable reference — and bots in this category do not take them.

The effect only shows when something goes wrong. The result never arrives, the queue stalls, the bot deletes your account: three possibilities with the same ending, because no third party held the money until the service was delivered. A web service that takes cards is not automatically better at producing images, but it does put a bank between you and the seller.

More than appears on your screen. Every incoming message carries your account number and device language code; the profile shows a display name, a username and a picture; and any link you open from that chat exposes an IP address. Add every file you sent and that is enough to build a list you never agreed to in writing.

A phone number is not transmitted, and that is often used as reassurance. But the list above still binds one real account to one queue of requests, and a list like that has value to anyone holding it. On a phone, a comparable set of data is collected differently — through permissions granted to an installed app.

Philippine law does not judge the tool; it judges the act. Section 12 of the Safe Spaces Act of 2019 lists, as gender-based online sexual harassment, the uploading and sharing without the victim's consent of any media containing photos, voice or video with sexual content, and any unauthorised sharing of a person's photos online. Forwarding a result into a group chat falls inside that wording, and Section 14 sets the penalty at prisión correccional in its medium period or a fine of ₱100,000 to ₱500,000, or both.

The Anti-Photo and Video Voyeurism Act of 2009 runs alongside it, punishing the copying, sale, distribution, publication or broadcast of intimate images of a person taken without consent — expressly including through the internet and cellular phones — with three to seven years and a fine of ₱100,000 to ₱500,000. A closed channel takes nobody outside these provisions: what is weighed is the act of distributing, not the size of the audience. The full account of how Philippine law treats this, including the money risk, is set out separately.

For content in the public part of the platform — channels, bots, sticker sets — Telegram provides a reporting route and acts on it after review. For one-to-one conversations its position is explicit: private chats are between their participants, and it does not process requests about them. So the advertising channel can be reported, while the conversation where your file was sent will not be examined by anyone.

Inside the Philippines, the routes that work are not the platform but the authorities: a criminal complaint for the act, to the PNP Anti-Cybercrime Group or the NBI Cybercrime Division, and a takedown demand for the material. Where personal data is involved, the National Privacy Commission is the body a complaint goes to. Those routes run in parallel and do not wait for one another, and the second moves much faster when the link evidence was collected at the start. For money lost to a bot, frankly, there is no route at all: there is no seller whose name can be written into a report.