Scammers have started messaging users on behalf of Telegram tech support, threatening to block their accounts. In their messages, they claim to have detected suspicious activity or received numerous complaints about the account.

Next, the victim is informed of a "violation of rules" and is urgently required to confirm their account via a special link. Refusal is accompanied by threats of restrictions or a complete block.

In reality, the link leads to a phishing page. If the user enters data there or confirms login, the attackers gain access to their account.

The scheme relies on pressure and urgency: the person is not given time to check the message and is pushed to act out of fear of losing their account. The main sign of deception is the demand to follow an external link to "unblock" or "confirm" the profile.