The general fraud scheme:
1. The user receives a message from someone in the contact list saying that he sent the user a gift - subscribe to Telegram Premium.
2. The user presses the button, at which point he receives an authorization code. On the screen with the gift, it says that this code must be entered to activate the premium subscription.
3. The user enters this code and his account is immediately opened on the attacker's computer.
4. The new account immediately sends such a message to the entire contact list and deletes it from the sent list. At the same time, the message remains in the hands of the recipient. Your account is safe if two-factor authentication is enabled In this case, even after entering the code, the attacker needs to enter the password that only the account owner knows.
How to set up two-factor authentication in Telegram: 1. Go to Settings → Privacy. 2. Select the Two-step verification section and enable it. 3. Enter the password for additional protection of the account. 4. Click Done. What to do if you have already clicked on a link and sent a code: - Go to Settings → Active sessions and click on the End all other sessions link; - Enable two-factor authentication. When an account is hijacked, it is unclear if all the letters have been downloaded and what other actions have taken place. To protect yourself from account theft, enable two-factor authentication in Messenger and do not click on suspicious links,"