The United Nations Office on Drugs and Crime (UNODC) has released a report highlighting the extensive use of Telegram by powerful criminal networks in Southeast Asia. This revelation underscores a significant shift in how organized crime conducts large-scale illicit activities in the digital age.
Telegram, founded in 2013 by Pavel Durov and his brother Nikolai, has grown to nearly 1 billion users worldwide by 2024. The platform's emphasis on privacy and security, including end-to-end encryption for Secret Chats, has made it popular among users seeking confidentiality. However, these same features have attracted criminal elements.
The UN report details how hacked data, including credit card information, passwords, and browser histories, are openly traded on a massive scale within Telegram's channels. These channels, which can accommodate up to 200,000 members, often operate with minimal moderation. The app's ability to support large file transfers of up to 2GB has likely facilitated this illicit data exchange.
Cybercrime tools, including deepfake software and data-stealing malware, are widely available on the platform. The report also mentions unlicensed cryptocurrency exchanges offering money laundering services. One advertisement, quoted in Chinese, boasted, "We move 3 million USDT stolen from overseas per day."
Southeast Asia has emerged as a major hub for a multibillion-dollar criminal industry targeting victims worldwide. The UNODC estimates that this industry generates between $27.4 billion to $36.5 billion annually. Many of these operations are run by Chinese syndicates operating from fortified compounds staffed by trafficked workers.
The scale of profits earned by these criminal groups has driven innovation in their operations. They have integrated new business models and technologies, including malware, generative artificial intelligence, and deepfakes. The UNODC identified over 10 deepfake software service providers specifically targeting criminal groups involved in cyber-enabled fraud in Southeast Asia.
Benedikt Hofmann, UNODC's deputy representative for Southeast Asia and the Pacific, warned about the implications for consumers: "This means their data is at a higher risk of being fed into scams or other criminal activity than ever before."
Telegram's legal challenges have intensified recently. In August 2024, Pavel Durov was arrested in Paris and charged with allowing criminal activity on the platform, including the spread of sexual images of children. This arrest has sparked debate about the criminal liability of app providers and the boundaries of free speech.
In response to these allegations, Durov stated that Telegram would cooperate with authorities by providing users' IP addresses and phone numbers upon legal request. He also announced plans to remove features that have been abused for illegal activities.
The platform's troubles extend beyond Southeast Asia. In South Korea, estimated to be the country most targeted by deepfake pornography, police have reportedly launched an investigation into Telegram's role in online sex crimes. In India, a hacker used Telegram chatbots to leak sensitive data from a major insurer, prompting legal action against the platform.
As Telegram continues to face scrutiny, the balance between user privacy and preventing criminal activity remains a significant challenge. The platform's features, such as self-destructing messages and media files, have made it attractive to both legitimate users and criminal networks alike.
The UN report serves as a wake-up call for both users and regulators, highlighting the need for improved oversight and cooperation between tech companies and law enforcement agencies to combat the growing threat of cybercrime facilitated by messaging platforms.
"We will hand over users' IP addresses and phone numbers to authorities making legal requests. We will also remove some features that have been abused for illegal activity."
As the digital landscape evolves, the fight against cybercrime becomes increasingly complex. The case of Telegram demonstrates the double-edged nature of privacy-focused technologies and the ongoing challenge of balancing user rights with public safety.