In late 2025, scammers began using new schemes to take over Russian Telegram accounts, disguising them as prize distributions to active users and so-called adventure calendars. This was reported by information security company F6 to .
According to experts, attackers offer users to check personal activity statistics to receive Premium subscriptions or messenger local currency. There are legitimate bots on Telegram with similar functionality, but in this case we are talking about fakes. Advertisements for dangerous services are often distributed through TikTok.
Links in the profile lead to scam websites that look like Telegram or to malicious bots. F6 notes that those resources are often referred to as “Your 2025 Results,” “Year Results,” or “Your 2025.” Some of them were still unsealed at the time of inspection. After clicking the link, users are asked to enter their login information and verification code, which is essentially a security code. After transferring it, the scammers have full access to the account. Additionally, bots can ask you to subscribe to dozens of channels of supposed sponsors, sometimes disguising the links as buttons inside messages.
Another scheme involved fake advent calendars under the name Telegram. In this case, the user is asked to select the city, gender and content of the gift, after which they are again asked to subscribe to some channels. F6 believes that such channels could be used in other phishing schemes in the future.
