Is buying Telegram Stars safe? How to spot a scam

The one rule: delivering Telegram Stars or Premium requires your public username and nothing else. Not your password, not your SMS login code, not your 2FA password, not access to your account. Any service asking for those is not selling you anything — it is taking the account. Everything else on this page is detail; that rule catches almost every scam.

Why a username is genuinely enough

Telegram has a built-in gift mechanism. A sender specifies a recipient by username, pays, and Telegram delivers the Stars or the subscription to that account. The sender never touches the recipient's account and could not if they wanted to.

This is the same mechanism a friend uses to gift you Premium. A reseller is doing exactly that, at scale. Which means the moment anyone needs more than a username, the transaction has stopped being a delivery and become something else.

Warning signs, in order of severity

• Asks for your login code. Stop immediately. This is account theft in progress, always, with no exceptions and no legitimate explanation.
• Asks for your password or 2FA password. Same category.
• Asks you to log in to a website with your Telegram number. A phishing page that harvests the code as you enter it.
• A price far below everyone else. Stars cost the seller real money. A rate at half the market is a bait figure that changes at checkout, or a payment you never see again.
• Pressure and a countdown. "Pay in 2 minutes or the price goes up." Urgency exists to stop you checking.
• A card number sent in chat rather than shown in your order. Legitimate flows display the receiving card inside your own order window. A number pasted into a message can be swapped for anyone's.
• No support before payment. If nobody answers a simple question now, nobody will answer after your money is gone.
• No reviews, or reviews with no dates. Undated testimonials cost nothing to fabricate.

What a legitimate purchase looks like

1. You open the bot and pick what you want. No registration, no password, no document.
2. You enter a username — the recipient's, or your own.
3. The order window shows a card number and an exact amount. Both come from your own order, not from a chat message.
4. You transfer that exact amount from any app you use — Click, Payme, Uzum or your bank.
5. You confirm, and delivery arrives in about 10 seconds through Telegram's official notification.

Note what is absent: at no point does anyone need to be inside your account.

How to check a service before paying

• Look for dated reviews. Names and dates on individual reviews are far harder to fake than a round number in a headline. StarsJoy publishes its reviews with dates on the reviews page.
• Treat unverifiable scale claims as worthless. "100,000+ orders" with nothing to check it against tells you nothing — and inconsistent figures (a huge order count next to a small user count) tell you something worse.
• Ask a question first. A real service answers before payment. Response quality now predicts response quality later.
• Check there is a public offer or terms page naming what happens if delivery fails.
• Send a small first order. 50 Stars costs 12,000 UZS. That is a cheap way to test a service you have not used before.

If you already gave something away

Act in minutes, not hours:

1. Settings → Privacy and Security → Two-Step Verification — set or change the cloud password. This locks out anyone holding only a login code.
2. Settings → Devices — terminate all other sessions.
3. Check Settings → Privacy and Security → Active Sessions again afterwards; if a session reappears, someone still has access.
4. Report the payment to your bank with the receipt. Card-to-card transfers are hard to reverse, but a report creates a record.

If you lost money but not the account, you got off lightly. The account is the more expensive thing.

Related

• Telegram SMS code not arriving — and why you must never forward it
• About StarsJoy — what we are, and what we are not
• How to buy — 9 steps with screenshots