Understanding the Risks of Using Telegram for Cryptocurrency Communication
The recent arrest of Telegram's founder, Pavel Durov, has prompted significant changes in the messaging app's content moderation policies. While these updates aim to enhance user safety, cryptocurrency users must remain vigilant about the inherent risks associated with the platform.
Following Durov's arrest in Paris last month for failing to prevent illegal activities on the app, Telegram updated its FAQ page to clarify its content moderation policies. The company reassured users that its core policies and technology remain unchanged, stating that the FAQ update merely clarifies how users can report objectionable content, particularly in compliance with the EU's Digital Services Act.
In a message to his followers, Durov acknowledged the need for improved content moderation, noting that while the vast majority of Telegram users are law-abiding, a small fraction engaged in illicit activities tarnishes the platform's reputation. He expressed a commitment to transforming Telegram's moderation approach from one of criticism to one of praise.
The updated FAQ explicitly outlines the process for reporting illegal content, but details on how Telegram will handle flagged content remain unclear. Eva Galperin, Director of Cybersecurity at the Electronic Frontier Foundation, emphasized that only Telegram can clarify its response procedures for reported content.
Despite the forthcoming changes, crypto users should take proactive steps to secure their communications on Telegram. Galperin, who authored a harm reduction guide for Telegram users in Ukraine and Russia, pointed out that many users mistakenly believe their communications are secure. Only messages sent in "Secret Chat" mode are end-to-end encrypted, which is not the default setting. This means that Telegram can access the contents of regular messages, unlike competing platforms such as Signal and Facebook Messenger, where end-to-end encryption is standard.
To enhance privacy, users should ensure that "Secret Chat" mode is enabled for private conversations. Telegram claims that these encrypted chats have no backdoors, a statement that can be verified through the app's open-source code.
However, experts like Johns Hopkins University cryptographer Matthew Green have raised concerns about the robustness of Telegram's encryption technology. He argues that the MTProto 2.0 encryption protocol used by Telegram lacks the extensive peer review and testing that other encryption methods, such as those used by Signal, have undergone.
Ultimately, Telegram users must assess their trust in the platform and its founder when deciding whether to use the service. Even with proper encryption, private messages can be exposed if users take screenshots and share them with authorities. This has occurred in various legal cases, including those involving the January 6 Capitol riots.
In the cryptocurrency space, the prevalence of anonymous accounts adds another layer of risk. Users often communicate without knowing the true identities of their correspondents, which can lead to dangerous situations if those individuals have conflicting interests. Galperin advises users to exercise caution and avoid sharing sensitive information, such as wallet addresses, with untrusted contacts.
Telegram's FAQ allows users to report illegal content, but legal definitions vary by jurisdiction. What is considered protected speech in the U.S. may be deemed hate speech in Europe. Cryptocurrency laws also differ significantly from country to country, with some nations, like Saudi Arabia, prohibiting the use of Bitcoin. This discrepancy creates potential issues for users who may inadvertently flag content as illegal based on their local laws.
Galperin recommends that users familiarize themselves with the legal landscape in their respective countries to avoid unintentional violations. For those prioritizing privacy in their communications, she suggests considering alternatives like Signal, which offers peer-reviewed encryption technology endorsed by cybersecurity experts.