Telegram's new P2PL program offers premium subscriptions for exposing your phone number

Telegram has rolled out a new initiative known as Peer-to-Peer Login (P2PL), where Android users can gain a premium subscription by offering their phone numbers to forward SMS one-time passwords (OTPs) to other users. Participants can send up to 150 OTP texts per month to other users and receive a one-month $5 USD premium subscription in return, provided they meet this sending limit.

This has sparked security and privacy fears as the company's terms of service indicate the potential exposure of users' phone numbers, leading to possible unsolicited texts or calls. The feature, only available in some countries and on an opt-in basis, could also lead to unexpected network charges, including international text message fees, which are not reimbursed by Telegram. Contradicting its claim of prioritizing user privacy, Telegram admits it cannot prevent one-time password (OTP) recipients from seeing the sender's phone number. The terms of service also imply that opt-in users could access personal information about code recipients, escalating security worries.

The company aims to improve SMS access code reliability in certain regions with the P2PL program, but critics suggest it's just really to avoid SMS fees. The lack of robust user vetting and potential for SIM-swapping attacks remain concerns, as Telegram's reactive approach fails to prevent initial harm, contradicting the platform privacy emphasis.