Buying Telegram accounts: what is really on the shelf

The pitch is simple: why spend weeks registering and warming accounts when a shop sells them for $0.37 apiece, with “aged” ones a few dollars more? This guide is not a catalogue of shops - it is a look at what that inventory actually is, what the market itself admits about its origin, and why the cheap path usually ends up the most expensive one.

Every price below was checked in August 2026 on the storefronts themselves and will drift. Treat the figures as orders of magnitude and verify before relying on them.

What is actually on sale

Account shops sell two broad tiers. Fresh registrations (“autoregs”) are accounts created recently and in bulk, usually through number-rental services. Aged accounts advertise a registration year, and the year is the price axis: the older the account, the more it costs.

What you buy is a file, not a login: a tdata folder from Telegram Desktop, or a session string plus a JSON of device parameters - tdata and session strings explains what those contain.

Two things stand out. A 2020 account costs about 45 times a fresh mixed-geo one - that is how much the market believes age is worth; whether the belief is justified comes later. And guarantee badges (“48-hour replacement”) promise at most one thing - the login works at delivery; the storefront we checked does not publish the fine print behind the badge. Everything after that is your risk, and it transfers at checkout.

Stolen accounts sit on the same shelf

Here is the fact that settles the question for us. One of the largest account marketplaces, lzt.market, documents in its public API an origin field on every listing. The documented values include autoreg, personal, resale and self_registration - and also brute (password-guessed), phishing and stealer (harvested by credential-stealing malware). The API even ships a dedicated filter, not_origin[]=brute,phishing,stealer, so buyers can exclude stolen goods.

Read that as an operator. Stolen accounts are standard shelf inventory, classified and filterable like a shirt size - nobody builds an “exclude stolen” toggle for a problem they do not have. And storefronts that do not label origin are not cleaner; you just lose the label.

Why this bites harder on Telegram than almost anywhere else: identity is bound to the phone number. Whoever controls the number can pass SMS re-verification and recover the account - recovery sides with whoever proves the phone, not whoever holds a session file. The original owner of a stolen account keeps that master key forever.

A second, quieter handle survives the sale even on legitimately sold accounts: the recovery email attached to the cloud password. Setting your own password on top does not detach it, so a “forgot password” message still resets the account back to the seller. The order of operations that actually transfers ownership is worth following before the account does anything you care about.

What Telegram's terms actually say

We checked the public texts - telegram.org/tos and the API terms - on 2 August 2026. Neither contains an explicit ban on buying or selling accounts. The rules that do exist are general: no spam or scam, and clause 1.4 of the API terms forbids acting on a user's behalf without their knowledge.

The claim that Telegram “explicitly forbids” account sales is repeated across dozens of articles, yet every chain we traced ends at SEO aggregators citing each other - we could not find a primary source. Telegram itself, meanwhile, auctions usernames on Fragment: the platform evidently distinguishes selling a name from selling an account.

None of this is protection. Telegram does not need a ToS clause to act, because enforcement is behavioural. A freshly bought account produces the exact pattern anti-takeover systems watch for - a new device, a new IP and immediate activity - which is also what a genuinely stolen account looks like on the day it is resold. That alone is enough for restrictions or a freeze, no rulebook required.

“Aging” is a market term, not a Telegram one

“Aging” - letting an account rest after registration before it works, otlyozhka in the Russian-speaking market that runs most of this trade - has no meaning inside Telegram. There is no agreed standard either: recommendations range from 24-48 hours to 1-3 months, and mostly come from people selling aged accounts or warming services. We treat every specific figure in that range as unverified, because it is.

What calendar age cannot buy is history. An account that sat in a tdata archive for three years arrives with an empty dialog list, no contacts and no behavioural track record - a three-year-old blank. Nobody outside Telegram knows the scoring weights, but observed enforcement tracks behaviour and consistency - same device, same IP and geo, human rhythm, gradual ramp - not the account's birthday. Building that record is what warming is for.

A data point from our own fleet: two day-zero accounts were frozen before any automation touched them at all. The decisive variable was the phone number's country and the network profile that comes with it - no amount of resting would have changed that.

Register your own instead

Our recommendation, and how we run our own fleet: register on numbers you obtain yourself and warm every account. The reasons, in order of weight:

1. The downside is asymmetric. The worst case of a bought account is not “a dollar lost”. It is the original owner re-verifying the number at the worst possible moment and walking away with a warmed reputation and your customers' conversations inside.
2. Buying does not skip the ramp. The one genuine advantage on offer - starting with trust already built - does not survive the handover: the account still meets a new device, a new proxy and a new behaviour pattern, and needs the same careful warm-up as a fresh registration.
3. The price gap is smaller than it looks. Renting a number costs cents to a few dollars for most countries and up to about $9-10 for the priciest ones (checked August 2026; the verified per-country list is in the phone numbers guide); bought accounts run $0.37-17.58 - and both routes still pay for a proxy and weeks of warming. The premium buys risk, not time.
4. Provenance compounds. A self-registered account has one owner, one live session and your security settings from day one - no unknown seller session in the background, no origin field to wonder about.

The one purchase we consider defensible: a small test batch for experiments, bought where origin is labelled explicitly and quarantined before it touches anything real. As a supply channel for a production fleet - no. If you are buying regardless, take the account over in the right order: preparing a bought account is the intake procedure, and skipping it is how a working account turns out to still belong to its seller.

How this maps onto the platform: Teleliner imports a tdata folder or a session string, de-duplicates by Telegram user id rather than phone number, stores sessions encrypted and runs exactly one live session per managed account. Warming - per-account daily plan, quiet hours in the account's own timezone, daily caps, a full action journal - is built into the platform, and the whole workflow assumes accounts you registered and intend to keep.