Guide · Updated
Crypto Telegram Bots: Alerts, Trading Bots and Fake Bots
Are Telegram crypto trading bots safe? What alert, trading and payment bots need, what they never need, and how to spot fake bots before you use one.
Bots are everywhere in crypto Telegram. They send price alerts, post calendar events, run trading from a chat window, sell VIP subscriptions, guard groups against spam, and hold wallets. Some of them are excellent. Some are fakes built to look exactly like the excellent ones.
The useful question isn’t “is this bot safe?” in general. It’s “what does this kind of bot need from me, and is it asking for more?” This guide sorts bots into three types and answers that for each. It’s part of our guide to finding good crypto Telegram channels.
How bots work on Telegram
A Telegram bot is an account run by software instead of a person. Its username always ends in “bot” (for example @SomethingBot or @something_bot). Anyone can create one, in minutes, through Telegram’s official @BotFather.
What a bot can do on its own is limited:
- It can’t see your phone number unless you press a button to share it.
- It can’t read your other chats.
- It only sees messages you send it, or messages in groups where it’s been added (and, depending on its settings, only commands or mentions).
- It can open a mini-app, which is a website inside Telegram; see Telegram mini-app airdrop safety.
The risk comes from what you give it: keys, codes, approvals, money.
Type 1: information bots (alerts, calendars, prices)
What they do: send price alerts, post events, track wallets, show charts. Many channels in our directory are effectively bot feeds, such as the CoinMarketCal bot feed for crypto events.
What they may reasonably need: the coins or addresses you want to track, your alert thresholds, your time zone. Watching a wallet only needs its public address.
What they never need: a seed phrase, a private key, an exchange login, any payment to “activate” free alerts, or a wallet signature.
Risk level: low, as long as you only give them public information. The main risk is a fake copy that, after a while, asks you to “connect wallet to unlock premium alerts”.
Type 2: trading bots (with your keys or your funds)
What they do: buy and sell for you. Two main kinds:
- Wallet-based trading bots, popular for buying new tokens quickly on chains like Solana, Ethereum or TON. The bot creates a wallet for you, or you import one, and trades from it when you send commands. Maestro is one example with an official update channel in our directory. Our listing notes the obvious: trading bots carry custody risk.
- Exchange-connected bots that trade on your exchange account through an API key: copy-trading, grid bots, signal auto-execution.
What they may reasonably need:
- For wallet bots: control of the bot’s wallet, which means the bot (or its operators) can, technically, move your funds. That’s how they work. Treat the bot wallet like a hot wallet: keep only what you’re actively trading.
- For exchange bots: an API key with trading permission.
What they never need:
- Your main wallet’s seed phrase. If a bot wants you to “import” your main wallet, create a separate one for it instead.
- An API key with withdrawal permission. Exchanges let you create API keys with withdrawals disabled, and most let you restrict a key to specific IP addresses. A trading bot has no reason to withdraw. A key that can withdraw can empty your account.
- Your exchange password or 2FA codes.
Risk level: real, even with legitimate bots. Bugs, hacked bot infrastructure, and your own mistakes (pasting a wrong contract address, which the bot will happily buy) are all possible. Before buying anything through a bot, verify the contract: how to verify a token contract address.
Type 3: payment, wallet and group bots
What they do:
- Payment and wallet bots hold crypto inside Telegram, let you send it to other users, or take payments for things like VIP access. Crypto Bot (@CryptoBot) is a well-known wallet and payment bot with an official news channel.
- Subscription bots sell access to private VIP channels and add you after payment.
- Group management bots filter spam, run captchas for new members, and enforce rules.
What they may reasonably need: for payment bots, a payment from you, shown clearly with amount and recipient. For captcha bots, a button press or a simple puzzle.
What they never need: a seed phrase, a private key, or a wallet connection and signature to “verify you’re human”.
Risk level: depends entirely on whether it’s the real bot. Payment bots are copied constantly because they handle money directly. The safe approach to VIP payments is in free vs VIP crypto signal groups.
The fake “verification bot” drain
This one deserves its own section because it catches people every day.
- You join a crypto group. Instead of the chat, you see a message: “Verify you’re human to continue. Tap here.”
- A bot or mini-app opens. It asks you to connect your wallet, or to “sync”, “validate” or “import” it.
- It asks you to sign a transaction, or to type your seed phrase “to verify ownership”.
- Your wallet is drained.
Real captcha bots ask you to tap a button, solve a puzzle, or answer a question. They never need your wallet. If a group’s entry check asks for a wallet, leave the group. Often the whole group is a fake copy of a real project’s group, set up for this.
How to find the real bot
- Start from an official source. The project’s website, its official X account, or its verified Telegram channel’s pinned post. Follow the link from there.
- Compare the @username character by character. Fakes use an extra letter, a swapped character, a different underscore, or “Official” in the name.
- Ignore display names and pictures. Anyone can copy them.
- Don’t use bot links from comments, replies or DMs. That’s where the fakes are advertised.
- Check whether the official channel links back. A real bot’s own channel and website should point to the same username.
Some bots and companies also have Telegram’s blue verified checkmark on their accounts. That’s a signal you can check, but it’s not universal; many legitimate bots don’t have it, so its absence alone doesn’t mean a bot is fake. For common trading bots and analytics tools, our bots and tools category lists the official channels with their real usernames, which gives you a second place to compare against.
Never-give list
No bot, legitimate or not, should get:
- your seed phrase or private key for a wallet you care about;
- your Telegram login code (Telegram itself never asks you to send it anywhere);
- an exchange API key with withdrawals enabled;
- your exchange password or 2FA codes;
- a wallet signature to “verify” anything.
If you used a fake bot
- Seed phrase entered: move remaining funds to a new wallet with a new seed immediately.
- Transaction or approval signed: revoke approvals with a block explorer’s approval tool, then move funds if you’re unsure what was signed.
- API key shared: delete the key on the exchange immediately and check recent account activity.
- Telegram login code shared: Settings → Privacy and Security → Active Sessions, terminate all others, turn on Two-Step Verification.
Then expect “support” DMs and “recovery” offers. Both are usually scammers following up; see the “admin will DM you” scam.
Bots in your daily routine
Used well, a couple of bots make Telegram much more useful: a price alert bot for the coins you hold, an events feed for your calendar. Add them to the setup in how to set up a crypto news feed on Telegram, give them only public information, and keep any trading bot on a short leash with a small balance. For learning more about how all of this works, the education category has beginner-friendly channels.
Part of our series on crypto Telegram. Start with the overview: How to Find Good Crypto Telegram Channels (and Skip the Junk).