As of September 2024, the encrypted messaging service has agreed to 14 user data requests from the United States; this number soared to 900 after its CEO was detained by French authorities in August.
Before September 2024, the policy of the encrypted communication provider Telegram stated that it would only share user data with law enforcement in the event of terrorism. By the end of August, the company's Russian-born CEO Pavel Durov was arrested in France and released on a $5 million bail.
By the end of September, Telegram changed its stance, agreeing to provide user information to law enforcement in cases of fraud and other cybercrimes, including phone numbers and IP addresses. Telegram also committed to producing a transparency report on the data it releases based on law enforcement requests. According to Telegram's latest transparency report, the platform's cooperation with the police has indeed exploded since September.
According to 404 Media, Telegram stated that in the first nine months of 2024, the company only responded to 14 requests from the US government, affecting 108 users. By the end of the year, Telegram reported that it had responded to 900 requests from the US, affecting 2,253 users.
The next report is expected to be released by Telegram in April.
Telegram's data sharing policy affected
Last year, when Durov was arrested, experts predicted that the additional pressure on Telegram would not have a significant impact on its thriving cybercrime activities. Callie Guenther, Senior Manager of Cyber Threat Research at Critical Start, said that in the short term, the arrest and crackdown on certain cybercrime activities might benefit cyber defenders, but ultimately they will find other places to conduct their illegal business.
"This development is expected to prompt many cybercriminals to turn to alternative platforms that prioritize privacy or use decentralized infrastructure," she said. "Platforms like Signal or Session, as well as services on the dark web, may become the next hubs of illegal activity, but this migration could also create a more fragmented ecosystem, complicating law enforcement work and requiring additional resources to monitor new pathways."
Guenther added that in the long run, Telegram's policy shift represents a broader trend of governments increasing pressure on tech companies to cooperate with law enforcement activities, noting that Durov's arrest is a notable example.
"The trade-off between privacy and security remains controversial," Guenther said. "Over time, cybercriminals may adapt to the new situation, increasing the complexity of operations for investigators and cybersecurity professionals. Balancing these considerations is crucial for addressing the constantly changing dynamics of online threats without undermining broader privacy protections."
