Nearly one-third of Vietnam’s Internet users have a Telegram account, but this platform is also a thriving hub for cybercriminals, especially those running scams.
Take, for example, a Telegram group where members openly advertise services like creating fake accounts, guaranteeing successful withdrawals, and enabling biometric transfers. These offers became particularly prominent after July 1st, when Vietnam’s new regulations on biometric verification for money transfers came into effect.
This group, active since 2023, has attracted over 4,000 members and specializes in selling services such as creating accounts on demand and forging documents. While the legitimacy of these advertisements remains unverified, the mere existence of this group and its active participants is a stark reminder of the hidden world within Telegram—a digital underworld where cybercriminals operate with alarming openness.
Why is Telegram Being Dubbed the «New Dark Web»?
In the past, cybercriminals operated primarily on the dark web—a hidden part of the Internet where access required specialized browsers like Tor and convoluted URLs. This approach allowed them to conceal their identities and personal information, evade law enforcement, and keep the majority of Internet users at bay.
However, in recent years, Telegram has emerged as a new kind of dark web, where illicit activities are no longer hidden but are conducted openly. Founded by billionaire Pavel Durov, this platform is easily accessible to anyone with a simple download from the App Store, Play Store, or even through a standard web browser.
A July report from cybersecurity firm Kaspersky highlighted that «cybercriminals are increasingly using Telegram as a platform for underground market activities.» Through channels and groups, these criminals blatantly advertise services that are outright illegal—ranging from personal data sales and pornographic content to cyberattacks, weapons, and drugs. Kaspersky’s data reveals a 53% increase in such posts on Telegram between May and June compared to the same period last year.
Experts point to three main factors that attract cybercriminals to this platform: its widespread use, a perceived sense of safety, and easy searchability.
On July 23rd, Pavel Durov announced that Telegram had reached 950 million users—an increase of 50 million in just three months and nearly doubling from the 500 million users reported at the start of 2021. This rapid growth has cemented Telegram’s position as one of the world’s most widely used platforms.
Durov has repeatedly emphasized the platform’s commitment to user privacy, including its minimal data collection and near-total non-cooperation with governments. «This is believed to provide cybercriminals with a sense of safety and impunity,» noted Alexey Bannikov, an analyst at Kaspersky.
With tools like group chats and channels, criminals can easily create communities to share illegal information. These groups can host up to 200,000 members and can be easily found using Telegram’s own search function. «If someone can imagine it, Telegram almost certainly has it,» wrote Fortune.
In Vietnam, Telegram is not only exploited for illegal exchanges but also as a hunting ground for scammers preying on unsuspecting victims. This trend surged in 2023 with scams involving «collaborators» and «mission tasks.» Ngô Minh Hiếu, the founder of the Anti-Fraud Project, explained that scammers typically approach users through social media posts on platforms like Facebook, followed by direct messages or phone calls, eventually steering the conversation onto Telegram.
According to Hiếu, any messaging app could be used for such schemes, but Telegram’s appeal lies in its anonymity and the ability to erase traces through features like self-destructing messages. On Messenger, for instance, fake accounts can often be identified through their Facebook profiles. But Telegram requires nothing beyond a phone number for OTP verification—a number that can easily be rented or purchased through bulk service providers.
According to statistics from DataReportal in early 2024, 32.6% of Internet users in Vietnam aged 16-64 are on Telegram. This means that one in every three people in this demographic is using the app. However, while Telegram is beloved by many for its convenience and rich feature set, it has also become a dangerous environment for those who are unaware of cybersecurity risks.
The Turning Point for Telegram
If things go according to plan, Telegram could soon reach the milestone of 1 billion users this year, with a goal of hitting 1.5 billion users by 2030, as envisioned by its founder, Pavel Durov. To maintain its independence, Durov has sought additional funding through bond investments, planned an IPO, and started selling ads. In an interview with the Financial Times, Durov revealed that he had raised approximately $2 billion and earned «hundreds of millions of dollars» from advertising sales. Telegram is also redeveloping TON, a cryptocurrency that can be used for transactions on Telegram or to purchase ads on the platform, with a revenue-sharing model for users. TON’s market capitalization currently stands at $15 billion, ranking it 9th in the global market.
However, these ambitious plans could face significant disruption following Durov’s recent arrest.
On the morning of August 24th, Telegram’s founder was arrested upon arriving in France. The OFMIN, a French agency responsible for combating violence against minors, issued the arrest warrant, accusing Telegram of insufficient moderation and lack of cooperation with authorities.
Telegram’s encryption features have been criticized for enabling criminal activities to go unchecked. This has led to accusations that Durov could be complicit in crimes such as drug trafficking, cyber violence, fraud, organized crime, and even terrorism. If convicted, Telegram’s CEO could face up to 20 years in prison.
In a social media post on August 26th, Telegram called it «absurd» to hold the platform responsible for its misuse, insisting that they comply with European laws, including the Digital Services Act, and that their moderation practices «meet industry standards.»
