Telegram serves as a hub for 'underground markets' of Southeast Asian crime gangs, claims UN

The United Nations Office for Drugs and Crime (UNODC) claims that hacked data, including credit card information, passwords, and browsing histories, is openly traded on Telegram.

Criminal networks across Southeast Asia are increasingly relying on the messaging app Telegram to carry out large-scale illicit activities, according to a United Nations report released on Monday. The report highlights how the app has significantly changed the way organised crime operates in the region.

The United Nations Office for Drugs and Crime (UNODC) claims that hacked data, including credit card information, passwords, and browsing histories, is openly traded on Telegram. The platform, which has vast, minimally moderated channels, allows cybercriminals to thrive.

Additionally, tools for cybercrime, such as deepfake software and data-stealing malware, are also widely available on the platform. Unlicensed cryptocurrency exchanges that offer money laundering services are commonly used by criminal groups, the report said.

An ad quoted in the report, written in Chinese, boasted: "We move 3 million USDT stolen from overseas per day." It also noted that there is strong evidence of underground data markets migrating to Telegram, where vendors specifically target transnational criminal groups based in Southeast Asia.

UNODC Highlights the Scale of Illicit Activities

The region has become a key hub for a multi-billion-dollar industry that uses fraudulent schemes to target victims globally. UNODC estimates that the industry generates between $27.4 billion and $36.5 billion annually, with Chinese syndicates often operating from fortified compounds staffed by trafficked workers.

Pavel Durov, the Russian-born founder of Telegram, was arrested in Paris in August, accused of enabling criminal activity on the platform, including the sharing of child sexual abuse material. This arrest has sparked debates on the liability of app providers and the limits of free speech versus law enforcement.

Following his arrest, Durov, currently out on bail, stated that Telegram would cooperate with authorities, handing over user IP addresses and phone numbers in response to legal requests. He also pledged to remove some features that have been exploited for illegal purposes.

Benedikt Hofmann, UNODC’s deputy representative for Southeast Asia and the Pacific, described Telegram as a user-friendly platform for criminals. He warned that consumers’ personal data is now at greater risk of being used for scams or other illegal activities.

The report further explained that criminal groups are integrating new technologies, such as malware, generative artificial intelligence, and deepfakes, into their operations. UNODC identified more than 10 deepfake software providers targeting cybercriminals involved in fraud across Southeast Asia.

Elsewhere in Asia, South Korean police are investigating Telegram’s role in enabling online sex crimes, with the country being one of the most targeted by deepfake pornography.

In India, a hacker recently used chatbots on Telegram to leak data from Star Health, a leading Indian insurer. The leak involved personal details like names, phone numbers, tax information, and medical records. The incident has led Star Health to take legal action against the platform.