Telegram gift or Stars stolen: what to do and how to secure your account
What to do if a Telegram NFT gift or Stars were stolen or your account was hacked: active sessions, two-step verification, reporting, the chances of getting a gift back and a protection checklist.
If a gift or Stars were stolen from you, cut the thief off first: Settings → Devices → end every session you don't recognise, then turn on or change your two-step verification password and check your recovery email. That stops further theft. Getting a transferred gift back is unlikely: Telegram publishes no way to reverse such a transfer, and a blockchain transfer can't be undone.
How to tell your account was hacked
- Settings → Devices shows a session you didn't open.
- Another of your devices shows a notification asking whether you recognise a new login. Per Telegram's developer documentation, answering "no" ends that session, and if you don't answer it is confirmed automatically after a period Telegram sets.
- Gifts have vanished from your profile, Stars were spent while you did nothing, or your friends get messages in your name.
- Login codes arrive that you didn't request. That is someone trying to log in: they can't get in without the code, so never tell anyone the code.
What to do at once
- End the other sessions. Settings → Devices (Telegram's FAQ also lists Privacy & Security → Active Sessions). One rule: you can't end other sessions from a session opened less than 24 hours ago. If you've just logged in again, you may have to wait a day to close the thief's sessions — but a thief who logged in recently can't close yours either.
- Turn on two-step verification or change the password: Settings → Privacy and Security → 2-Step Verification. A new device then needs the password as well as the code. Set a recovery email — details in Telegram passwords explained.
- Check Chat Automation (Settings → Chat Automation). A bot connected there can be given rights, and Telegram's documentation lists among them transferring and upgrading the account's gifts and transferring its Stars. Disconnect any bot you don't know.
- Warn your friends: someone may ask them for money or gifts in your name.
- Report the scammer with the Report button on their profile. If they impersonate you, Telegram's FAQ points to @NoToScam.
- Contact support: Settings → Ask a Question. If you can't log in at all, use the form at telegram.org/support.
- If gifts were in a TON wallet and the thief may know the recovery phrase, create a new wallet and move what is left there.
If your phone was stolen, Telegram's FAQ adds: end the session on the old device in Settings → Devices and ask your mobile operator to block the SIM card. Without access to the number or to a session on another device, Telegram can't recover the account.
Telegram's Stars terms say that if you delete your account or lose access to it for any reason, the remaining Stars balance is considered forfeit. So don't put off recovering the account.
Can a stolen NFT gift or Stars be returned
Honestly, don't count on it.
- Telegram's public rules don't describe a way to undo a gift transfer to another user.
- The Stars terms call sales of Stars final: there is no refund for unintentional purchases.
- A transfer on the TON blockchain can't be reversed by the way the network works.
Report the scammer and contact support. Don't pay anyone who promises to "get the gift back for a fee": that is the scammers' second round.
If a gift is missing and nothing was stolen, the cause may be simpler — see why a gift didn't arrive or disappeared.
How gifts and Stars get stolen
- "A code was sent to you by mistake." You're asked to forward a login code. Per Telegram's FAQ, login codes must never be shared, and Telegram never asks for your password.
- A QR code from a stranger. If you scan a login QR code and accept it in your own Telegram, you let a new device into your account.
- "Gift valuation" and "checking" bots. They ask you to hand over a gift or to connect the bot under Chat Automation.
- Fake Fragment and marketplaces. The real Fragment is fragment.com — type the address yourself, don't follow a link from a chat.
- "Escrow" deals and fake Premium giveaways — these are covered in Telegram scams.
- A wallet's recovery phrase. It should never be typed into any site.
Protection checklist
- Two-step verification and a recovery email.
- A passkey: Settings → Privacy and Security → Passkeys. Your account must stay registered to an active phone number you control.
- Check Devices once a month. Old sessions can be ended automatically — the setting is in Privacy and Security.
- Don't forward codes, don't scan other people's QR codes, and don't connect bots under Chat Automation unless you're sure.
- Never hand over a gift before you're paid — see how to sell an NFT gift and how to transfer a gift.
The Shiba Bank bot
The Shiba Bank bot never asks for a login code, a cloud password or a recovery phrase. Stars and Telegram Premium are delivered by @username, with no login to your account. For where gifts are traded, see where to buy and sell an NFT gift.
Frequently asked questions
How do I see active sessions on Telegram?
Settings → Devices. End any session you don't recognise, and if you suspect a hack, end all the others and change your two-step verification password.
My Telegram gifts were stolen — what do I do?
End the other sessions, turn on two-step verification, check Chat Automation, report the scammer and write to support. Telegram doesn't promise to return a transferred gift.
How do I recover a hacked Telegram account?
Log in with your phone number and end the other sessions. If you can't log in, see Telegram passwords explained and the form at telegram.org/support.
Can a stolen gift or Stars be returned?
Telegram's public rules describe no way to do it. Contact support, but don't count on a refund.
How do I protect my Telegram account?
Turn on two-step verification and a recovery email, add a passkey, check Devices regularly and never tell anyone your login code.
Why are bots under Chat Automation risky?
A connected bot can be given rights, including transferring gifts and Stars. Connect only what you know.
