Telegram briefly disappeared from Apple’s App Store after illegal material was inserted into an old group message and reported directly to Apple. Pavel Durov says the incident was not a routine moderation failure, but an attempt to exploit app-store rules as a form of extortion.
Apple removed Telegram after identifying content that violated its rules on child sexual abuse material. The app returned later the same day, once Telegram deleted the post and banned the account responsible.
What drew attention was how the content had reportedly been placed.
The illegal image was hidden inside an old post
According to Durov, the person behind the incident edited a message that had already been published in an active public Telegram group. An illegal image altered with artificial intelligence was added to the existing post.
Because it was an edit rather than a new message, the content did not appear at the bottom of the chat or move through the group’s normal conversation feed. Members were therefore less likely to see it and report it to Telegram.
The post was instead reported directly to Apple.
Durov described the tactic as “takedown extortion.” He alleged that attackers use illegal material to pressure group administrators for money, threatening to have their communities removed if they refuse to pay.
He also claimed that automated accounts were involved. Neither the identity of the person responsible nor the wider extortion allegation has been independently verified. Apple has not publicly addressed that part of Durov’s account.
Durov criticized Apple’s response
Durov did not dispute that the material should have been removed. His criticism focused on Apple’s decision to pull the entire application before contacting Telegram.
The platform has more than one billion monthly active users, yet the actions of one account were enough to stop new downloads and updates through the App Store for several hours.
Durov argued that Telegram could have deleted the content immediately if Apple had first alerted the company. He said removing a major communication platform without giving its operator a chance to respond created a risk for any app built around user-generated content.
Epic Games CEO Tim Sweeney also questioned Apple’s decision, arguing that large messaging services could struggle to operate if a single user’s illegal post were enough to trigger the removal of an entire app.
Apple said its review confirmed a violation of App Store rules. Telegram removed the material, blocked the user and was then restored to the store.
A weakness in app-store enforcement
The episode highlights a difficult problem for both platform owners and app stores.
Apple must act quickly when it receives reports involving child sexual abuse material. But immediate removal of an entire application can also give malicious users a way to target platforms or individual communities.
Editing an older message may be especially effective because it allows harmful material to remain outside the most visible part of a group conversation. If the content is then reported directly to an app store, the developer may have little opportunity to investigate before enforcement begins.
Durov has not provided evidence showing how widely the technique is being used. Still, the incident demonstrates how systems designed to remove illegal content can themselves become targets for manipulation.
Telegram’s own moderation record remains under scrutiny. The company has faced pressure from regulators in several countries over illegal activity on the platform. Telegram says it uses automated tools, user reports and digital fingerprints of known abuse material to identify and remove prohibited content.
According to figures published by the company, Telegram blocked 337,942 groups and channels connected to child sexual abuse material in 2026. The number is a Telegram figure and has not been independently audited.
The app returned to the App Store within hours. Apple has not said whether it contacted Telegram before the removal or whether developers will be given advance notice in similar cases.