A Telegram airdrop is usually a points balance that a project later turns into a token. The balance lives in a web app inside the chat client. The token lives on a blockchain. The gap between them is where both opportunity and fraud sit.
Anatomy of a tap-to-earn airdrop
Most programmes follow the same four stages. Seeing them in order helps you spot which stage a bot is in, and which requests belong to which stage.
- 1. PlayYou open a Mini App from a link or a bot and tap, complete tasks or invite friends. Your balance is a number in the project’s database. It is not on a blockchain yet.
- 2. AnnounceThe project says it will launch a token, and says how in-app balances will be handled. This should appear on its own website or official channels.
- 3. ConnectYou link a wallet. On TON, this is done through TON Connect. This is the first moment real funds are at risk if the app is fake.
- 4. ClaimYou claim the token, and may then hold, stake or move it. The claim may have a deadline, as the Notcoin case shows.
Note that no stage requires you to send money to receive tokens, to type a seed phrase, or to share your Telegram login code. A request for any of those at any stage means stop.
What Mini Apps are, in Telegram’s own words
Telegram’s documentation describes Mini Apps as JavaScript-based web interfaces that run inside Telegram, supporting authorisation, payments through third-party providers and push notifications. That is the technology behind most tap-to-earn games.
Three details from the documentation matter for safety:
- Launch links are ordinary web-style links. A bot’s main Mini App can open from
https://t.me/botusername?startapp, and a direct link takes the formhttps://t.me/botusername/appname. Anyone can publish such a link anywhere, so the link format is not a mark of authenticity. - Apps receive profile data. The documentation lists user ID, name, username, language code, premium status and photo URL among what an app receives, together with a
start_paramthat can carry a referral code. It does not list your phone number. - The app itself is a website. The docs say the app developer must validate the data it receives on their server, and that the unvalidated object “should not be trusted”. That is advice to developers, but it also reminds you that a Mini App is only as trustworthy as whoever runs the site behind it.
Telegram’s FAQ adds that bots can see your public name, username, profile picture and the messages you send them, but not your phone number unless you give it to them, and that any bot should be treated as a stranger.
The TON connection
The TON documentation describes TON as a blockchain platform designed for scalable smart contracts, applications and payments at consumer scale. It does not explain the link between TON and Telegram beyond naming Mini Apps and community chats, and we do not claim more than that. What we can say is how a wallet connects.
| Item | What the official docs say | Why it matters to you |
|---|---|---|
| TON Connect | The standard wallet connection protocol for TON. It links a dApp to your wallet through an end-to-end encrypted session, and lets the app read the connected address, request signatures and send transactions. | Connecting shares your address and lets the app ask you to sign. Read each request in the wallet before you approve it. |
| Private keys | The dApp never accesses the user’s private keys. | No genuine flow needs your seed phrase. A page asking for it is not using the protocol. |
| Digital goods in Mini Apps | Mini Apps that sell digital goods or services must use Telegram Stars, not TON payments. TON Connect remains available for permitted blockchain interactions. | An in-app purchase should follow Telegram’s payment flow. A request to send TON to an address in chat is a different thing. |
For other campaigns on this chain, see our TON ecosystem page, and for wallet separation see burner wallets for airdrops.
Case study: what the Notcoin record shows
We use one example, and cite only what our Notcoin entry already documents from official or clearly labelled sources.
Notcoin began as a tap game inside Telegram. Players accumulated an in-app balance by tapping.
The project moved to a token on TON. Claimed tokens could be withdrawn to a wallet, sent to an exchange or staked in the app.
Decrypt reported the claim window ended on this date, one month after launch.
The official site shows a burn dashboard. About 210 million NOT from unclaimed Notcoin Clicker balances are listed as burned there.
Three lessons follow from the record, and we flag the last as editorial judgement.
- Balances can be deadline-bound. People who did not claim within the window lost their balance, and the project turned that supply into burned tokens.
- The claim happened inside the Mini App. No separate website was part of the documented flow.
- We could not verify details. We found no official post that restates the conversion formula, the share of supply or the snapshot, so we do not describe them.
- Judgement: a low-effort programme reaching millions means a small, uncertain amount per person. Time cost was real, and the outcome was not guaranteed.
Why most “Telegram airdrop” bots are scams
We cannot publish a rate, because we found no official statistic. The mechanics explain why the category attracts fraud: setup is free, links spread through chats, and users are used to tapping a bot without reading anything. These are the recurring shapes.
| Pattern | What you see | What is actually happening |
|---|---|---|
| Fake bot | A bot with a name close to a real project, offering a claim | Anyone can register a username. Notcoin’s claim has closed, so any current “Notcoin claim” bot is not the original. |
| “Verify your wallet” | Request to connect, then to type a seed phrase or sign something unclear | TON docs say the dApp never gets your keys, so a seed phrase request is theft by definition. |
| Group invite spam | A message from a stranger inviting you to a group where a bot posts claims | The invitation is the lure. Telegram’s FAQ says that anyone claiming to be Telegram on other platforms is not, and that any bot should be treated as a stranger. |
| Login-code request | A bot asks for the code Telegram sent you | Telegram says login codes should never be shared with anyone. |
| Pay-to-claim | A fee or deposit to “unlock” tokens | Genuine claims do not require a payment to receive tokens. See our scam guide for the wider list. |
How to verify an official bot
Verification here means one thing: the handle you are about to open is the one the project itself publishes. The tool below splits a Telegram link into its parts so you can compare each part with the project’s own documentation. It cannot prove a bot is real. It only helps you read what you were given. Nothing leaves your browser.
Then work through these steps in order:
- Open the project’s website by typing the address or using a bookmark.
- Find the Telegram link on that site or in its documentation. Open Telegram from that link.
- Compare the handle character by character with what you were sent. Look for swapped letters, extra underscores and numbers.
- Remember that Telegram says usernames must end in
botfor bots and cannot be changed later. A matching ending is not a reason for trust. - If the project has no official link anywhere you can find, treat that as a no. Our legitimacy checklist covers the broader test.
Safe-use checklist
Before you open or connect a Telegram app
0/8What we cannot tell you
Honesty about gaps is part of the method. We did not find an official source for the number of players of any Telegram game, for how any project filters bots, or for how Telegram verifies bots or channels. We therefore do not state them. If you see a number in a social post, check where it came from. Because the tax side of tokens received this way varies by country, read our tax orientation and keep a record of each claim. The latest campaigns list shows what we have verified, and how we verify explains the process.
Primary sources
Sources last checked 19 Oct 2026. Links open the project's own pages, not summaries from other sites.
- Telegram: Mini Apps documentationcore.telegram.org
- Telegram: Bot featurescore.telegram.org
- Telegram FAQ: scams, spam and botstelegram.org
- TON documentationdocs.ton.org
- TON Connect overviewdocs.ton.org
- Notcoin official site and token pagenotcoin.org
- Decrypt report on the Notcoin claim ending (third party)decrypt.co
Frequently asked questions
What is a Telegram airdrop?
It is a token distribution tied to activity inside Telegram, most often in a Mini App or bot that tracks points while you tap, complete tasks or invite friends. When the project launches a token, the points may convert into tokens you claim inside the same app. Many things called Telegram airdrops are not real, so verify the bot first.
What is tap-to-earn?
It is a game format where repeated taps or simple actions in a Telegram Mini App build an in-app balance. The balance is not a token until a project says so. Notcoin is the documented example: players built a balance in a clicker Mini App, and the token launched later on TON, with a claim period that has since closed.
Is Notcoin still giving away tokens?
Not that we can verify. Decrypt reported that the claim ended on 16 June 2024, one month after the NOT launch on TON, and the official site now shows a burn dashboard rather than a claim. Any bot offering a Notcoin claim today is not the original programme and should be treated as a scam.
How do I tell an official Telegram bot from a fake one?
Find the handle on the project’s own website or documentation and open Telegram from that link. Bot usernames must end in bot, but that alone proves nothing, since scammers use similar names too. Telegram says any bot should be treated as a stranger. Never send a seed phrase or Telegram login code to a bot.
Do I need a wallet for Telegram airdrops?
Usually you need a TON-compatible wallet if the project is on TON. TON Connect is the standard protocol for linking a dApp to a wallet, and the TON docs say the dApp never gets your private keys. Use a separate wallet with little in it, and treat any request to type your seed phrase as a theft attempt.