46 Minors Recruited via Telegram Bot: Russia Charges CEO with Terrorism

The exploitation of a seemingly innocuous Telegram dating bot to target children as young as 12 for arson and assaults underscores the evolving cybersecurity threat landscape. For CISOs, threat intelligence analysts, and privacy advocates, this case is a stark warning that encrypted platforms can become force multipliers in hybrid warfare—and that governments will push hard for access that could weaken security for everyone.

Russian authorities have formally charged Pavel Durov, founder and CEO of Telegram, with aiding terrorism, marking a dramatic escalation in the Kremlin’s campaign to bring digital communications under state control. The Federal Security Service (FSB) alleges that Ukrainian intelligence services weaponized a popular dating chatbot on Telegram to recruit Russian citizens for sabotage and terrorist acts. Over the past year, 46 users of that bot, aged between 12 and 22, have been detained for assaulting law enforcement officers, arson, and other offenses. Durov, 41, has been added to international wanted lists, and if convicted in Russia he could face a life sentence.

“

Since then, Moscow has adopted waves of restrictive internet laws, banned major Western platforms like Facebook, Instagram, and X, throttled YouTube, and invested heavily in technology to monitor and manipulate online traffic.

These charges are not an isolated event but the latest step in a multi-pronged crackdown that intensified after Russia’s full-scale invasion of Ukraine in February 2022. Since then, Moscow has adopted waves of restrictive internet laws, banned major Western platforms like Facebook, Instagram, and X, throttled YouTube, and invested heavily in technology to monitor and manipulate online traffic. Telegram, with its estimated 1 billion users worldwide and strong encryption, had long been seen as a relative safe space, but it has drawn growing scrutiny. In the past, Russian regulators sporadically attempted to block or pressure the platform, yet its outsized popularity—including among government officials—made a total ban politically impractical. By directly targeting Durov with terrorism charges, the Kremlin now shifts the pressure from the platform to its founder personally, potentially seeking to force operational changes or obtain backdoor access to encrypted communications.

The legal implications are profound. Durov resides in Dubai and holds dual citizenship of France and the United Arab Emirates. Neither country has an extradition treaty with Russia that would readily compel his surrender, but the international wanted notice could constrain his travel and expose him to arrest in cooperating jurisdictions. The charge of “aiding terrorism” carries extraordinary weight, allowing Russian prosecutors to frame the case in the language of national security and potentially justifying more aggressive state action. It also sets a troubling precedent: holding a tech CEO personally liable for the misuse of a platform by a third party, even if the platform itself was not directly involved. This may chill the willingness of encryption-focused services to operate in or near Russian markets and could embolden other authoritarian regimes to pursue similar avenues against tech executives who refuse to comply with surveillance demands.

From a business and user perspective, Telegram’s defiant stance—its official X account posted an image of Durov giving the middle finger—suggests that the company intends to resist rather than capitulate. The platform’s Dubai base and Durov’s personal wealth provide a buffer against immediate financial or operational collapse. However, the uncertainty generated by an active international arrest warrant may affect investor confidence, partnership opportunities, and the willingness of advertisers or payment processors to associate with the brand. For the more than 1 billion users, especially those in Russia and neighboring countries who rely on Telegram for uncensored news and coordination, these charges raise the specter of service disruptions, increased surveillance, or a forced compliance with Russian law enforcement requests.