How to Buy Telegram Accounts: What to Check Before Paying

Search for where to buy Telegram accounts and the results tell you something before you read a word of them. People are not asking whether accounts can be bought. They are asking on Reddit and Quora whether a particular seller is real, and they are searching marketplace names like PlayerUp and G2G by name. The question is not availability. The question is who to trust with money.

This guide answers that question from the buyer's side. It is written by people who sell these accounts, which you should factor in, and it is written to be useful even if you buy from someone else. Everything technical in it comes from measurement or from Telegram's own documentation, and where we are guessing we say so.

What you are actually buying

The first mistake is thinking you are buying a phone number. You are not. You are buying an authorisation: a key that tells Telegram's servers this device is allowed to act as that account.

That distinction decides almost everything else. A phone number is a thing one party owns. An authorisation is a thing that can be copied, that can exist in several places at once, and that can be revoked by whoever else still holds one.

So the real question when you buy is not "did they give me the account." It is "how many other people can still act as this account, and can I remove them."

The three delivery formats, in one paragraph each

Sellers hand over accounts in one of three shapes. We wrote a full comparison in session file versus TDATA, so here is only what matters at the moment of purchase.

TDATA is the desktop client's own data folder. You drop it next to a Telegram Desktop installation and the account appears, already logged in. Convenient, and it means the seller had a working desktop session which they copied.

A session file is a small database used by automation libraries. Same idea, different container, and the one you want if the account is going into a tool rather than into your own hands.

Number plus code is different in kind, not just in format. The seller gives you the phone number and reads you the login code, and your device generates the key. This is the only one of the three where the authorisation you end up holding was created on your side.

Keep that last sentence. It comes back later and it is the single most useful thing in this article.

What is inside a session file, measured

We created an empty session with a standard automation library and opened it, so this is measurement rather than description. No real account was involved and no customer data was touched.

It is a small SQLite database, about 28 kilobytes, with five tables. One holds the connection details and the authorisation key. One caches entities the account has seen, with identifiers, usernames, phone numbers, names and dates. The rest track sent files, update state and a schema version.

Two things follow from that, and neither is obvious from a seller's listing.

The file is not encrypted

There is no password on it. Whoever holds a copy holds the account, until the authorisation is revoked from inside Telegram. This means a session file sitting in a chat, an email, or a shared drive is a live credential, and it stays live after you delete the message, because the copy the other person downloaded is still a copy.

A used file carries the previous owner's contact cache

That entity table is a cache of who the account has interacted with. If you buy an account that was actually used before you got it, you inherit a partial list of the people it talked to, complete with usernames and in some cases phone numbers.

Neither side usually notices this. The seller does not think of it as data they are handing over, and the buyer does not think of it as data they are receiving. It is worth knowing in both directions: what you get, and what you would be giving away if you ever resold.

Two-step verification is where most deals go wrong

This is the trap, and it catches experienced buyers.

Telegram's own description of two-step verification is short: once enabled, logging in needs both an SMS code and a password, and you can set a recovery email address to regain access if you forget the password.

Now think about what that means when an account changes hands. If the seller had two-step verification enabled, the password is theirs. You need it, or you cannot add the account to a new device. So sellers hand it over.

Here is the part people get wrong. Changing that password does not remove anyone. Two-step verification governs new logins. It does not touch the sessions that already exist. If the seller kept a copy of the session or the TDATA folder, changing the password leaves them exactly where they were, still logged in, still able to read everything.

The thing that removes them is terminating other sessions, which is a separate action in the settings, and which most buyers never take because the account appears to work fine.

The recovery email nobody checks

The second half of Telegram's sentence is the half that matters and the half almost nobody reads: a recovery email address helps regain access if you forget the password.

If the seller set a recovery email and you never look at it, they have a documented, supported path back into the account, months after the sale, without needing anything you hold. It is not an exploit. It is the feature working as designed, for the wrong person.

Check it. If there is an address there and it is not yours, the account is not yours either, whatever the seller told you.

Verifying an age claim, honestly

Every listing says the accounts are OLD. Sixteen months, twenty-four months, two years. The number is the price driver, so the number is what gets exaggerated.

Here is what does not work, and we know because we got it wrong ourselves and were corrected by evidence.

Telegram assigns each account a numeric identifier, and those identifiers broadly increase over time. It is tempting to take a known account with a known creation date, use it as an anchor, and conclude that any lower identifier is older. We did exactly that, ran the comparison across a handful of accounts, and told a customer their accounts were newer than claimed.

Then a profile screen showed a registration date that flatly contradicted the calculation. The account with the "too new" identifier had been registered more than two years earlier.

The lesson generalises past Telegram. A measurement that rests on one unverified assumption is not a measurement. The assumption there was that identifiers are handed out in a single continuous sequence across the whole system, and consistency across six of our own accounts did not prove it.

What does work

Ask for the account itself to show you. Some clients surface a registration date on the profile. That is a direct statement rather than a derivation, and it is the only age evidence worth arguing about.

Beyond that, look at the account's own history for signs of a life: saved messages, joined channels, a contact cache that is not empty. An account that claims two years and has the digital footprint of something created last Tuesday is telling you something.

And accept a limit. You will not fully verify age before payment in most transactions. Price that uncertainty into who you buy from rather than pretending you have solved it.

The eighteen month clock

This one is published and it surprises people. Telegram states that if you stop using it and do not come online for at least eighteen months, the account is deleted along with all messages, media, contacts and everything else in the cloud. The exact period is adjustable in settings.

Two consequences for a buyer.

First, an account that has genuinely sat idle for a long time is on a timer, and you are buying the remainder of it. Logging in resets that, so this is a reason to log in promptly rather than to stockpile untouched purchases.

Second, and less obvious, the period is a setting. A seller could have shortened it. It costs nothing to check and it is the kind of detail that turns up months later as a mystery.

The phone number question

Telegram lets you change the number on an account and keep everything: contacts, messages, media, the lot. That is useful, and it also explains a category of listing you will encounter.

Ask a direct question: who holds the SIM now, and for how long. The answers cluster into three.

Nobody, the SIM is gone. Common with genuinely OLD inventory, because keeping thousands of physical lines active is expensive. This is not automatically bad. It does mean nobody can request a fresh login code, including you, so if you ever lose access there is no recovery through the number.

The seller still holds it. This is the arrangement that should worry you most, and sellers rarely volunteer it. A held SIM means the seller can request a login code whenever they like. Every other precaution you take is decorative next to this one.

You get the SIM. Rare, expensive, and the only version where the number is genuinely yours.

There is a fourth case nobody controls. Carriers recycle numbers. A number that belonged to your account can be reassigned to a stranger who then receives the login codes. Telegram's own materials do not address this scenario, so treat it as an unquantified risk rather than something with a known frequency.

Six checks before you send payment

In order, because the order matters.

1. Ask which format, and why

A seller who cannot explain the difference between the three formats is reselling something they did not produce. That is not automatically disqualifying, but it changes what their guarantees are worth.

2. Ask about two-step verification explicitly

Is it enabled, will you receive the password, and is there a recovery email set. Three separate questions. A seller who answers the first and skips the third has answered the easy one.

3. Ask who holds the SIM

Phrase it as a fact question, not a yes-or-no. "Who has the SIM now" gets a better answer than "do you still have access."

4. Ask for a small first order

Whatever the minimum is, take it. The purpose is not the accounts, it is watching how the seller behaves under a real transaction: how fast they deliver, what the handover looks like, whether they answer afterwards.

A seller who will not sell you five before selling you fifty is telling you their inventory is thinner than the listing.

5. Ask what happens if one is restricted on day one

You want a specific answer with a time window in it. "We'll sort it out" is not one. This is also the question that separates a supplier from a reseller, because a reseller cannot promise a replacement they do not hold.

6. Agree the delivery method before you pay, not after

The most common cause of a bad handover is improvisation. If format, timing and what counts as delivered are agreed in advance, there is nothing to argue about afterwards.

Red flags, ranked by how much they cost you

Refusing escrow on a first deal with a stranger. On any marketplace with escrow, declining it on a first transaction with someone who has no history with you is the single loudest signal available. There are honest reasons to prefer direct payment. There is no honest reason to insist on it from a new counterparty.

Pressure to buy more than you asked for. You said five, they explain why fifty makes more sense. Sometimes true. Often the shape of a seller who needs a bigger number before disappearing.

Prices meaningfully below everyone else. OLD accounts on real numbers cost money to produce, and nobody is generous by accident. A price that undercuts the market by half is usually buying you something that is not what the listing says: newer, virtual-numbered, or already sold to someone else.

Vagueness about age combined with precision about price. Sellers who know their inventory can tell you how it was made. Sellers who cannot will change the subject to the discount.

A different payment address than the one first quoted. Late address changes are a classic interception pattern. Confirm through a second channel before sending anything.

No answer to "what if one is restricted." Silence on the failure case is a forecast of what support looks like.

The first ten minutes after delivery

Do these immediately, in this order, before you do anything else with the account.

Log in and check active sessions. Every device authorised on the account is listed. Anything you do not recognise, remove. This is the step that actually transfers ownership, and it is the step most buyers skip.

Set or change two-step verification, then terminate other sessions. In that order, and do the second part. As covered above, the password change alone leaves existing sessions untouched.

Check the recovery email. Remove an address that is not yours, or set your own.

Check the self-destruct period. Confirm it is what you expect rather than something shortened.

Look at the profile. A registration date if the client shows one, joined channels, saved messages. This is your only real audit of the age claim and it takes thirty seconds.

Then leave it alone. The fastest way to lose a freshly bought account is to log in and immediately start messaging strangers from it. If the plan involves outreach, our guide on avoiding account bans in cold outreach covers what the first week should look like instead.

What you are paying for when the price changes

Listings usually offer tiers, and the labels vary between sellers while the underlying differences do not. There are only three things that move the price, and knowing which one you are paying for stops you buying the wrong tier.

Age

The obvious one, and the one most exaggerated. Age is worth paying for because platforms treat a two year old account differently from a two week old one, but it is also the claim you can verify least well before payment. Pay for age from a seller whose other answers were precise.

History

An account that has done ordinary things behaves differently from one that has sat untouched since creation. Joined channels, some saved messages, a contact cache with entries in it. Sellers call this warmed, seasoned or activated. The word does not matter; ask what was actually done and over what period.

A one line answer here is a bad sign. Someone who genuinely built history can describe it, because building it took them time and they remember what it cost.

Subscription status

An account carrying a paid subscription costs more, straightforwardly, because the subscription costs money. What matters is how long is left and whether it renews. An account sold as premium with three weeks remaining is a different product from one with a year.

What does not move the price, whatever the listing says

Delivery format. TDATA versus session file is a packaging choice and a seller who charges more for one is charging you for a copy operation.

Paying: the part where money actually disappears

Most losses in this market are not technical. Nobody clones your session. The money simply goes out and nothing comes back.

Escrow, when it exists, is the whole answer. On a marketplace that offers it, use it on every first transaction without exception. The cost is a small fee. The alternative cost is the entire order.

Crypto is normal here and it is final. Almost every seller in this market prices in cryptocurrency, and that is not itself a warning sign; it is how cross-border small transactions work when card processors will not touch the category. What it does mean is that a sent payment is not reversible. There is no chargeback, no dispute with a bank, no process. That fact should change how much you send on a first order, not whether you use it.

Confirm the address through a second channel. If the payment address arrives late in the conversation, or changes after being quoted, stop and confirm it somewhere else. Interception of a pasted address is one of the few genuinely technical attacks in this space and it costs nothing to defend against.

Split large orders. If you are buying fifty, buy five, run them for a few days, then buy the rest. The information from the first five is worth more than the volume discount on the other forty five, and any seller worth using will still be there.

The first week decides whether the purchase was worth anything

You can buy perfect accounts and destroy them in an afternoon. This is the part where buyers lose the most money in aggregate, because the loss is invisible: the accounts were fine, the handling was not.

The short version is that a brand new authorisation on an old account behaves like a new device to Telegram's systems, and a new device that immediately starts messaging strangers at volume is the exact pattern automated defences look for. Age protects the account from some things. It does not protect it from that.

What to do instead, in one line each: log in and leave it alone for a day; do ordinary things before you do commercial things; start well under whatever limit you eventually want to reach; and never run all of them on the same connection at the same time. The full reasoning, including what actually triggers a restriction and how the recovery process works, is in our guide on avoiding account bans.

If one does get restricted despite all that, it is often reversible, and there is a specific process rather than a shrug. We covered it in the spam restriction guide, and the important detail is that the appeal has a shape and answering it badly wastes the one attempt that matters.

Buying at volume changes the questions

Everything above assumes a handful of accounts. Past twenty or so, three new problems appear and none of them is about the purchase.

Delivery becomes an operation. Fifty session files arriving in a chat is fifty files to organise, label and keep track of. Decide the naming and storage before they arrive, not after, because renaming fifty credentials by hand at midnight is how one ends up in the wrong place.

You cannot hold them in your head. Which account is on which connection, which one is resting, which one got restricted last week. At small numbers this lives in memory. At larger numbers it needs to live somewhere, and the tools people reach for are the ones that show many accounts in one place, which is what our Account Manager was built to do.

The failure rate stops being theoretical. With five accounts, one restriction is bad luck. With fifty, restrictions are a monthly line item, and the seller's replacement policy stops being a formality and becomes the thing you actually bought. This is why check number five matters more the larger the order, and why our own warranty terms are written as a window with a number in it rather than a promise to be reasonable.

Where people buy, and what each place is good for

Gaming marketplaces

PlayerUp and G2G turn up in the search suggestions because people genuinely go there. They exist for game accounts and handle other categories as a sideline. The advantage is escrow and a dispute process. The disadvantage is that the staff resolving your dispute know a great deal about game accounts and very little about Telegram authorisations, so a technically subtle problem is hard to argue.

Forums

Specialist forums have reputation systems, feedback scores and public threads where a seller's history is visible. That last part is the real value: you can read what went wrong for other people before it goes wrong for you. Check the feedback ratio before the price. A seller with a large negative count in your exact category has told you everything you need.

Reddit and Quora

These appear in the suggestions as research destinations rather than as places to buy, and that is the right use for them. Threads asking whether a specific seller is legitimate are useful. Direct messages offering to sell you accounts, less so.

Direct from a supplier

Fewer protections, better information. You are trading a dispute process for the ability to ask precise questions and get precise answers. Worth it when the supplier can actually answer them, and worse than a marketplace when they cannot.

What a decent listing looks like

Read enough listings and the honest ones share a shape. They state the age as a range rather than a single impressive number, because real inventory is a range. They say what kind of number the account sits on. They name the formats they can deliver in. They state a delivery window rather than promising instant. They say what happens if something is wrong, with a time limit attached.

What they do not do is stack adjectives. "High quality, safe, guaranteed, best in the market" is four words that mean the same thing and carry no information. The presence of that sentence is itself a signal, because a seller with specifics does not need it.

What we do, stated plainly

We sell these accounts, so an honest account of our own practice belongs here rather than in a sales page.

Our inventory is OLD real numbers in a range rather than a single headline figure, and we say the range. Delivery is within about two hours of payment, in whichever of the three formats the buyer picks. Two-step verification is handed over open, which means the buyer sets their own password rather than inheriting ours, and the first thing we tell people to do is terminate other sessions.

The SIMs do not stay with us indefinitely, and we say so rather than implying the number is yours forever. That is the honest trade in this market: cheap enough to be worth buying means nobody is paying to keep thousands of physical lines alive, and a seller who claims otherwise at a normal price is telling you a story.

If the accounts are going into a workflow with several of them running at once, the management problem starts immediately after the purchase problem ends, and we wrote about that separately in managing multiple Telegram accounts. Our own warranty terms spell out what we replace and in what window, which is the document to read before deciding whether our answer to check number five is good enough.

How to buy from us

There is no checkout page for accounts, deliberately, because every order needs two decisions made first: the tier and the delivery format. So it runs through a conversation.

Message @FloqalSupport on Telegram with the tier you want, the quantity, and which of the three formats suits you. You get the price and the payment address in the same reply, and delivery follows within about two hours of payment. Current tiers and minimum quantities are on our pricing page.

If you are not sure which tier fits, say what you plan to do with the accounts rather than asking which is best. The answer is different for someone adding members than for someone sending messages, and that one sentence saves a round of questions.

Is buying accounts allowed?

This question deserves a straight answer rather than a comfortable one.

Telegram's terms of service, as published, deal with subscription terms and prohibited content such as spam, violence and illegal material. They do not contain a clause about account ownership, transfer or resale. That is a factual description of what the document says, not a legal opinion, and it is a different situation from platforms whose rules address transfers explicitly.

What Telegram does enforce, visibly and constantly, is behaviour. Accounts get restricted for what they do after the sale: message volume, reports from recipients, patterns that look automated. The purchase is not what draws attention. The first day of activity is. That is why the last section of this article is about the ten minutes after delivery rather than the ten minutes before payment.

The short version

If you read nothing else, this is the article in six lines.

You are buying an authorisation, not a number, so the only question that matters is who else still holds one. Ask about two-step verification, the recovery email and the SIM as three separate questions rather than one. Take the smallest first order the seller allows, because you are buying information about them rather than inventory. Use escrow wherever it exists, and never send to a payment address that changed late in the conversation without confirming it somewhere else. On delivery, check active sessions and terminate everything you do not recognise, before anything else. Then leave the account alone for a day, because the first week does more damage to a purchase than any seller ever does.

Frequently Asked Questions

Where is the safest place to buy Telegram accounts?

There is no safe place, only places with different protections. Marketplaces give you escrow and a dispute process, at the cost of arbitrators who do not understand the product. Forums give you a public reputation history, which is the most useful signal available if you read it before you read the price. Buying direct gives you better answers and fewer protections. Match the choice to how much you are spending on a first order.

How do I know an account is really OLD?

Ask the account to tell you rather than deriving it. Some clients show a registration date on the profile, and that is a direct statement. Everything else is inference. Do not try to calculate age from the numeric account identifier: we tried exactly that against a known anchor, told a customer their accounts were new, and were contradicted by a registration date on the profile screen.

What is the difference between TDATA, session files and number plus code?

The first two are containers holding an authorisation the seller already created. The third is different in kind: you receive the number and the login code, and your own device creates the key. That is the only format where the authorisation you hold did not exist on someone else's machine first. The full comparison is in our session file versus TDATA guide.

Can the seller get the account back after I pay?

Yes, through three routes, and all three are avoidable. They keep a copy of the session, which is why terminating other sessions matters more than changing the password. They left a recovery email in place, which Telegram supports as a documented way back in. Or they still hold the SIM and can request a login code. Ask about all three before paying and check all three after delivery.

Does changing the two-step password remove the seller?

No, and this is the most expensive misunderstanding in the whole transaction. Two-step verification applies to new logins. Sessions that already exist keep working. The action that removes them is terminating other sessions, which is separate and which most buyers never perform because the account looks fine without it.

What happens if I do not use the account?

Telegram deletes accounts that have not come online for at least eighteen months, along with all the messages, media and contacts in the cloud. The period is adjustable in settings, which cuts both ways: a seller may have shortened it. Log in after purchase rather than stockpiling untouched accounts.

Should the seller keep the SIM card?

No, and if they do, it outweighs every other precaution. A held SIM lets them request a login code at any time. Many sellers of genuinely OLD inventory no longer hold the SIMs at all, because keeping thousands of lines active is expensive, and that is a normal answer rather than a worrying one. What should worry you is a seller who avoids the question.

Is a used account worse than a fresh one?

It depends what you are buying it for, and there is a detail sellers rarely mention: a used session file carries a cache of the entities that account interacted with, including usernames and sometimes phone numbers. We measured this on an empty session and the table is there by design. So a used account brings history you did not ask for, and if you ever resell it, you pass that history on.

How much should OLD Telegram accounts cost?

We publish our own tiers rather than guessing at a market average, and the useful principle is the one below the number: OLD accounts on real numbers cost money to produce. A price far under everyone else is not generosity, it is a different product being described with the same words, usually newer accounts, virtual numbers, or inventory that has already been sold to somebody else.

Is buying Telegram accounts against the rules?

Telegram's published terms of service cover subscription terms and prohibited content, and do not contain a clause about account transfer or resale. That is what the document says. What actually gets accounts restricted is behaviour after the sale rather than the sale itself, which is why what you do in the first week matters more than where you bought.

What is the first thing to do after delivery?

Check the active sessions and remove anything you do not recognise. That single action is what transfers control, and it is the one buyers skip because the account already works. Then set your own two-step password, terminate other sessions, clear any recovery email that is not yours, and check the self-destruct period.

Can I check an account before paying?

Partly, and it is worth asking for what is checkable. A seller can send a screenshot of the profile showing a registration date, or answer specific questions about two-step verification, recovery email and the SIM. What they will not do, reasonably, is hand you a working login before payment, because that is the product. The way to test a seller is a small first order, not a free sample.

What is the difference between a supplier and a reseller?

A supplier produced the inventory and can tell you how: what kind of numbers, over what period, what was done with the accounts afterwards. A reseller bought a batch and is passing it on, which is legitimate but changes what their guarantees mean, because they cannot replace something they do not hold. The question that separates them is what happens if an account is restricted on day one, and how quickly.

Why do the prices vary so much between sellers?

Three things move price and only three: age, history, and any paid subscription attached. The delivery format does not, whatever the listing implies, because packaging an existing authorisation differently is a copy operation rather than work. If a seller charges more for one format than another, you are paying for their convenience.

How many should I buy the first time?

The seller's minimum, whatever it is. You are not buying accounts on a first order, you are buying information about the seller: delivery speed, handover quality, and whether they answer a message the day after they have your money. That information costs a fraction of a large order and it is the only reliable way to get it.