Pavel Durov charged in Russia: Telegram accused of facilitating terrorism

Introduction

On July 29, 2026, the Russian Federal Security Service (FSB) formally charged Pavel Durov, founder and CEO of Telegram, with facilitating terrorist activities (Art. 205.1 of the Criminal Code) and failure to remove illicit content. Simultaneously, Durov was placed on the international wanted list. The charges highlight the systematic exploitation of the messaging platform by Ukrainian special services and terrorist organizations, and come after months of restrictions culminating in an almost total block of Telegram in Russia.

Technical Analysis

The indictment is based on an attack vector combining social engineering, cyber fraud, and psychological coercion orchestrated through the Telegram chatbot “Daivinchik / Leo-Dating”. Between July 2025 and July 2026, joint FSB–Ministry of Internal Affairs investigations reconstructed the two-phase scheme:

1. Grooming and phishing: fake female profiles contacted young Russian men, building online romantic relationships. After gaining trust, they induced victims to share geolocation data of crowded public places and make payments via fraudulent links.
2. Coercion and forced recruitment: subsequently, individuals posing as police officers or Rosfinmonitoring officials contacted the same people, claiming that the funds had ended up with the Ukrainian armed forces and the coordinates had been used for missile attacks. Under psychological pressure, the victims (often minors) were forced to carry out sabotage – arson on critical infrastructure, assaults on law enforcement – presented as fake “counter-terrorism checks”.

The operations led to the arrest of 46 Russian citizens aged between 12 and 22, involved in attacks, damage to energy grids, transport, and communication networks, and courier activities for illicit funds destined for cryptocurrency exchanges. Each phase was coordinated through Telegram channels and bots that, according to the FSB, Durov knowingly failed to remove despite repeated requests.

Impact

• National security: sabotage and attacks caused casualties (including women and children) and economic damage estimated in billions of dollars, hitting critical infrastructure.
• Vulnerable victims: adolescents and young adults were recruited through psychological manipulation techniques, suffering legal consequences and deep trauma.
• Service disruption: after progressive restrictions, in April 2026 Russia imposed an almost total block of Telegram, isolating millions of users and businesses that relied on the platform for lawful communications.
• Global reputation: the charges reignite the debate over the boundaries between privacy, freedom of expression, and moderation obligations, jeopardizing Telegram’s image as a champion of uncensored communication.

Mitigation

At present, no technical countermeasures have been communicated by Telegram; the only official reaction was a provocative photo posted on X. Russian authorities responded with criminal prosecution, arrests, and the platform block. To prevent similar campaigns, organizations and users should adopt the following measures:

• Anti‑phishing and anti‑social engineering training: always verify the identity of contacts, be wary of requests for money or GPS coordinates, especially if accompanied by legal threats.
• Monitoring public channels: immediately report suspicious bots or accounts impersonating official entities.
• Cooperation with law enforcement: in case of impersonation of authorities or unusual requests, contact the police and competent bodies immediately without acting autonomously.

FAQ

What exactly are the charges against Pavel Durov? The FSB accuses Durov of complicity in terrorist activities for failing to remove channels, chats, and bots used by Ukrainian services and terrorist organizations to plan sabotage, armed attacks, mass murders, and cyber fraud in Russia. The charge presumes that this omission facilitated operations with significant casualties and damage.

How did the Daivinchik chatbot work? It operated in two phases. The first used fake female profiles to lure young men, obtain geolocation data of crowded places, and induce them to make payments on phishing sites. In the second, fake police contacted the victims claiming that the money and coordinates had been used for Ukrainian attacks; in shock, the victims were forced to carry out sabotage as “loyalty tests” or to “clean their record”.

Will Telegram be permanently blocked in Russia? Since April 2026, the platform has been subject to an almost total block. The indictment of Durov and the international arrest warrant make further tightening likely, but a permanent ban will depend on judicial developments and political will. Currently, many Russian users access it via VPN, but official access remains severely restricted.