Telegram CEO Pavel Durov says a “takedown extortionist” planted AI-modified child sexual abuse material (CSAM) in a public group, triggering the app’s brief removal from Apple’s App Store. Telegram returned about 40 minutes later after the content was removed and the account was banned.
How the alleged takedown attack worked
According to Durov, the attacker edited an old message in an active group to add the illegal material. He claims the backdated edit kept it out of view for most members, reducing the chance that someone would report it to Telegram first.
Durov says these attackers demand money from group owners and use automated accounts to plant prohibited content in communities that refuse to pay. They then report the material directly to Apple in an attempt to get the community, or in this case the entire app, removed.
Telegram’s explanation has not been independently confirmed. Apple has also not publicly addressed the extortion claim or Durov’s allegation that it removed the app before contacting Telegram.
Apple confirmed the CSAM violation, not the extortion claim
Apple told Reuters that its review found content violating its strict rules against CSAM. The company said it restored Telegram after the developer “promptly removed the content and banned the user who posted it.”
The interruption affected new downloads, not people who already had Telegram installed. The app is available again on the U.S. App Store.
Apple’s App Review Guidelines make developers responsible for moderating user-generated content. Apps must filter objectionable posts, provide reporting and blocking tools, and respond to complaints. Apple can temporarily remove an app until it demonstrates better compliance, while serious or repeated violations can lead to immediate removal.
This is not Apple’s only recent App Store enforcement test. It previously warned Grok to fix deepfake violations or risk removal, while a separate policy update gave App Review more room to remove stale copycat apps. Those cases involve different rules, but all raise the question of how consistently Apple explains and applies removal decisions.
The flagged content was removed quickly. But if Durov’s account is accurate, the episode also shows how a malicious user could weaponize App Store enforcement against a much larger service. For iPhone users, the immediate issue is over: Telegram is back, and installed copies kept working throughout the removal.
