As mentioned, the attackers pay the subscription fee with stolen cards. According to users, this happens because Telegram does not provide confirmation of transactions via SMS, it is enough to indicate the card number, CVV code and expiration date. As a result, the cardholder will only receive a notification about the withdrawal of money.
So far, neither Pavel Durov nor other messaging developers have responded to user complaints.
Source: Ferra
