Telegram, the New Dark Web: How Anonymity Made a Messaging App a Global Law Enforcement Target
In June 2026, the Indian government delivered one of the most striking characterizations of a mainstream tech platform in recent memory. Appearing before Justice Tejas Karia of the Delhi High Court, Solicitor General Tushar Mehta defended the Centre's temporary blocking of Telegram by declaring that the messaging service had evolved into what authorities called the "new dark web." In a detailed affidavit, the government alleged that Telegram's architecture—built around anonymity, large public channels, and the ability to conceal phone numbers—had made it a preferred hub for cybercriminals, fraudsters, extremist networks, and others seeking to operate beyond the reach of traditional law enforcement. The claim was provocative, but it reflected a concern shared by regulators far beyond New Delhi.
From Exam Leaks to Extremist Propaganda
The Indian government's allegations were specific and wide-ranging. In court filings and an investigation report, officials accused Telegram of being used to circulate leaked examination papers—including material tied to the NEET medical entrance scandal—child sexual abuse material, financial fraud schemes, cyberattacks, and terrorism-linked propaganda. Officials noted that criminal networks had learned to post links on Telegram channels that connected onward to dark web forums through deep web addresses, effectively turning the app into a gateway layer between the visible internet and its hidden corners. This hybrid model, prosecutors argued, makes it extremely difficult for authorities to track and attribute criminal activity, since a single channel can broadcast to hundreds of thousands of users while shielding the identity of its operators. Telegram, which reports close to a billion users worldwide, disputed the blocking order and challenged the government's characterization in court, but the episode underscored a broader truth: the same design choices that made Telegram popular with activists, businesses, and ordinary users have also made it indispensable to the criminal underground.
How Telegram's Anonymity Actually Works
Telegram's privacy model rests on a combination of custom cryptography, flexible identity design, and deliberate product decisions. At its core is MTProto, the platform's proprietary protocol; current clients use MTProto 2.0, which relies on established cryptographic tools such as AES-256 and SHA-256 to encrypt communications in transit. Crucially, however, there are two distinct layers of protection. Ordinary "cloud chats"—private conversations, group chats, and channels—are encrypted between client and server, meaning messages are protected from third-party interception but remain technically accessible on Telegram's infrastructure. Only one-on-one "Secret Chats" use true end-to-end encryption, with keys held solely by the participants, self-destructing timers, and no server-side logs. Group chats and channels, the very features most associated with Telegram's public culture, do not support end-to-end encryption at all.
On top of this cryptographic layer sits an identity system designed for detachment from real-world credentials. While account creation requires a phone number, Telegram allows users to create public usernames and interact with others—including in massive broadcast channels—without ever revealing that number. Messages can be forwarded in ways that obscure or strip the original sender's identity, and the app's cloud-based architecture lets users sync across devices while keeping their phone number private. For journalists, dissidents, and citizens living under authoritarian governments, these features represent genuine protective value. For law enforcement, the same features create what India's Home Ministry described as a structural obstacle to identifying users. India's IT ministry sharpened this point in July 2026, when it issued formal notices to both Telegram and Signal asking how they prevent impersonation and misuse enabled by username-only interaction—a sign that regulators are now targeting the anonymity layer itself, not just the content that flows through it.
A Founder Caught Between Paris and Moscow
The legal pressure on Telegram has converged, in an almost unprecedented way, on its founder. Pavel Durov, the Russian-born entrepreneur who also holds French citizenship, was arrested at Le Bourget Airport near Paris in August 2024 and subsequently indicted in a French investigation opened that July over allegations that the platform failed to curb illegal content and cooperated insufficiently with judicial authorities. The most serious charges carry penalties of up to 20 years in prison, and although France lifted a travel ban on Durov in November 2025, the probe remains active with no trial date set; he was questioned for the fourth time in July 2026, with his legal team insisting that nearly two years on, no evidence has been produced to substantiate the charges. At the same time, Moscow has moved in the opposite direction: in late July 2026, Russia's FSB issued an international arrest warrant for Durov on accusations of "complicity in terrorism," alleging he allowed the platform to be used for recruitment by Ukraine's security services, and Russian authorities added him to their official terrorist and extremist list.
That double bind captures the central paradox of Telegram in 2026. Paris wants the platform to do more to unmask and remove criminal actors; Moscow wants it to police political and wartime narratives in the Kremlin's favor. In between, Telegram has faced mounting operational pressure inside Russia itself—outages, VPN dependence, and throttling by the telecom regulator Roskomnadzor have made the app increasingly difficult to use in a country where it counts roughly 90 million users. Meanwhile, cybersecurity researchers document a steady migration of threat actors to Telegram following repeated takedowns of dark web forums such as BreachForums and the seizure of LeakBase, with the platform serving as a fallback layer for leak distribution, affiliate recruitment, and ransomware ecosystem coordination.
Whether Telegram is truly "the new dark web" or simply the place where the dark web has learned to advertise remains a matter of debate among technologists. What is no longer in dispute is that anonymity, once treated as an unambiguous public good in digital policy circles, has become contested terrain. Governments from India to France to Russia are now writing rules—and pursuing criminal cases—that will define how much privacy a messaging app can offer before the state considers it complicit in the crimes that privacy enables. The answer, emerging court by court and statute by statute, will shape online expression for years to come.
