Is Telegram Wallet Safe? Custody, Geo Rules, and the Gram Rollout

Is Telegram Wallet Safe? It Depends Which Wallet

Whether Telegram Wallet is safe depends on three variables: who holds the private keys, where you live, and which threat you face. The @wallet bot is custodial, so The Open Platform controls the funds. TON Space is self-custody, so a lost seed phrase is permanent. The perpetuals desk adds leverage risk on top.

Start with the label problem. "Telegram Wallet" is not one app. The @wallet bot is operated by The Open Platform, a third party — not Telegram. It reached 100M+ activated accounts in 2024. Around it sit the self-custody TON Wallet and TON Space, plus a separate custodial perpetuals desk.

So the honest answer to "is Telegram Wallet safe" starts with a counter-question: safe from what? Each mode fails differently. A custodial account is exposed to operator or regulatory failure. A self-custody account is exposed to seed loss and phishing. A leverage account is exposed to liquidation.

The threats are not theoretical. In May 2026, security firm CTM360 documented FEMITBOT, a Telegram Mini App phishing campaign that harvested initData, impersonated MoonPay and Apple, and pushed Android malware. In April 2026, a QR-code drainer targeting Trust Wallet users abused ERC-20 approve() calls to set unlimited token allowances. Fake bots are part of the same surface, which is why a vetted list of Telegram trading bots is worth more than a search result. Different tools, same attack vector: the messenger.

The custody model tells you who can lose your money for you. The threat model tells you how it leaves. Answer both before you trust any of these products.

Custodial or Non-Custodial? @wallet vs TON Wallet / TON Space

The @wallet bot runs both modes. Its default custodial account lets The Open Platform hold the keys for easy onboarding. TON Space, launched publicly in September 2023, gives users a self-custody account secured by a 24-word seed phrase. One bot, two custody models, two very different risk profiles.

The operator keeps custody on purpose. In a Cointelegraph interview, the wallet's COO called true self-custody "exceedingly difficult" to scale for mainstream users, so the default account holds your keys for you. TON Space, rolled out more widely in November 2023, is the opt-in self-custody layer.

Coverage splits on the label as a result. Decrypt has described the product as "self-custody"; Cointelegraph has called it "custodial by default." Both are right about a different mode. The bot houses both.

Two details matter here. First, recovery is not uniform. TON Space and other TON wallets use the 24-word standard. But per CNBC, the US self-custody flow uses a split-key backup across Telegram and email — not a shown 24-word screen. Second, "zero-fee" is a transfer claim, not a withdrawal claim. TON transfers cost a fraction of a cent and USDT purchases are advertised at 0%, but withdrawals still carry network and service fees.

Deposits are cross-chain: funds from seven chains route through USDC or USDT, then convert to USDT-TON at 1:1 via MoonPay, live since February 11, 2026. It is the same rail people use to buy Telegram Premium with crypto — convenient, and one more third party in the chain of trust.

Available in the USA? Geo-Availability by Mode

Telegram Wallet availability reverses by mode and country. The United States received only the self-custody TON Wallet, activated July 2025. The custodial @wallet stays constrained there. The custodial perpetuals desk excludes both the US and the UK. Emerging markets get every mode, including 50x leverage.

The geography flipped. In 2023, TechCrunch reported the US was excluded from Telegram's wallet entirely. On July 22, 2025, that reversed: the self-custody US TON Wallet went live to roughly 87M US users. TON's Rogozov, quoted by CNBC, framed it as the "first self-custodial wallet natively integrated into a mainstream messaging platform in the US." Note the tight scope — "in the US" — not a global first.

Read the reversal carefully. The US got self-custody, and only that mode. The custodial @wallet is not promoted there. The custodial perpetuals desk excludes the US and the UK outright.

The UK is the clearest warning. On September 25, 2024, the wallet was disabled in the UK pending FCA registration. Withdrawals stayed open, but the re-enable date is unconfirmed as of August 15, 2026. A custodial wallet can be switched off in your country by a regulator — that's the operator-failure risk, made concrete.

The custodial @wallet is restricted across most of the European Union — the majority of member states sit on Wallet's own restricted-country list, alongside the US and the UK. Germany, Italy and Spain are the notable exceptions where it stays available. Self-custody, by contrast, is available almost everywhere. That single split explains most of the map.

The EU also sits under the general MiCA and Travel Rule regime that took effect July 1, 2026: a zero-threshold Travel Rule and ownership verification for unhosted-wallet transfers above €1,000 at the exchange level. Self-custody largely sits outside MiCA. That's the direction of travel, not a wallet-specific policy.

The perpetuals desk anchors the whole geo logic. Launched April 2, 2026, built on the Lighter DEX (valued at $1.5B), it offers up to 50x leverage across 50+ markets from a $1 minimum — and it is custodial. Emerging and frontier markets are the explicit target. High leverage, a $1 entry, and thin regulation are the exact conditions under which inexperienced traders get liquidated.

Telegram Wallet vs Tonkeeper and Other TON Wallets

Telegram-linked TON wallets split into custodial and self-custody camps. Tonkeeper, My Wallet, and Bitget Wallet Lite are all non-custodial. Only Bitget Lite lives fully inside Telegram and uses seedless MPC with no recovery phrase. Tonkeeper runs standalone-first, not natively embedded like @wallet.

If you want to hold your own keys, the field is wider than @wallet.

Two clarifications keep this honest. Tonkeeper is non-custodial and standalone-first across mobile, desktop, and a browser extension. It does ship a Telegram version, so "no Telegram integration" is wrong — it just isn't embedded natively the way @wallet is. And MyTonWallet was rebranded to My Wallet in June 2026: open-source, 24-word BIP39, Ledger support, and multichain across 11 chains — not TON-and-TRON only.

Bitget Wallet Lite is the outlier. It runs inside Telegram as a Mini App, stays non-custodial, and uses seedless MPC with no recovery phrase at all. It covers 100+ chains and reported 6M users within days of its October 2024 launch. So the "first self-custody in the US" claim doesn't stretch to "first in-Telegram non-custodial" — Bitget Lite and My Wallet predate that.

None of these wallets tracks token unlocks or vesting for you. If you hold TON-ecosystem tokens across custodial and self-custody accounts, you still have to watch supply events yourself.

Track the Tokens in Your Telegram Wallet with Drops Bot

Self-custody means you carry the risk — a depeg, a token unlock dump, or a quiet delisting, and the wallet itself will not warn you.

Drops Bot runs inside Telegram, so you can set price, wallet, and funding-rate alerts on TON, GRAM, or anything you hold without leaving the app or handing over your keys. It watches the supply events your wallet ignores, so your custody choice and your position monitoring live in one place. Get real-time TON & GRAM price alerts in Telegram with Drops Bot.

What the Native Gram Rollout Changes — and the Risks

The native Gram wallet is announced but not shipped as of August 2026. Pavel Durov promised on July 21, 2026 a self-custody wallet inside every Telegram app for over one billion users. No launch date, asset list, or key-recovery scheme exists yet. Every existing risk compounds at that scale.

First, the token background. The rebrand to GRAM (formerly Toncoin) took effect at 12:00 UTC on June 15, 2026, following an 81.22% governance vote. That figure is a vote share, not an adoption rate — worth separating.

Then the ambition. On July 21, 2026, Durov announced a native Gram wallet built into "every Telegram app," reaching over one billion users, with zero-fee transfers. He called it "the largest rollout of a non-custodial wallet in human history."

Treat that as a claim, not a fact. As of August 15, 2026, the native Gram wallet has no launch date, no published asset list, and no disclosed key-recovery scheme. Nothing has shipped.

Now the risk math. At a billion-user scale, every failure mode we've covered gets larger, not smaller.

The leverage desk itself signals the tension. Its own account has promoted 50x perps while noting the product is "restricted in some regions." That restriction is a regulatory limit doing the work a risk warning should.

Which brings us back to the operator. Telegram's broader crypto surface now spans payments, gifts, collectible stickers, and this wallet — but the @wallet bot is custodial by default, so asking whether Telegram Wallet is safe is really a question about The Open Platform, the operator, not Telegram. A billion-user rollout doesn't change that. It just raises the stakes on every answer above: which mode, which country, safe from what.