Telegram Dating Bot Recruited Russian Teens for Sabotage, Durov Charged in Terrorism Case

How a Telegram Dating Bot Became a Recruitment Pipeline

Russia’s Investigative Committee and the FSB have uncovered a systematic operation in which Ukrainian intelligence agencies allegedly used the Telegram dating bot “Daivinchik” to identify, groom, and manipulate Russian teenagers into committing acts of sabotage and terror. According to officials, 19 minors aged 14 to 18 were arrested across multiple regions, including Moscow, St. Petersburg, Novosibirsk, and Rostov, on charges ranging from terrorism to arson.

The scheme, active since at least May 2025, followed a chillingly consistent pattern: operatives posing as young women would build romantic rapport, extract personal information and geolocation data, then hand victims over to handlers impersonating Russian law enforcement. Under the illusion that they had already committed a crime simply by sharing coordinates, the teenagers were coerced into escalating tasks — from sending photos of military sites to setting fire to cars, administrative buildings, and fuel stations.

As the investigation widened, Russian authorities formally charged Telegram founder Pavel Durov with complicity in terrorist activity and issued an international warrant for his arrest. The move comes less than two years after Durov was detained in France over similar allegations that Telegram’s lax moderation allowed criminal networks to flourish on the platform. He was later released on bail but barred from leaving France pending trial.

Why the Scheme Worked — and Why Telegram Is in the Crosshairs

The Psychological Architecture of a Mass Grooming Operation

Security experts and witness testimonies reveal that the recruitment mechanism did not rely on randomness. Dating bots like “Daivinchik” prime users for emotional openness, lowering the guard that would normally flag a stranger’s request as suspicious. Once a victim sent even a trivial piece of data, handlers pivoted to fear — insisting the act constituted a federal crime and that cooperation was the only escape. This rapid switch from affection to threat is a classic coerced-compliance technique, amplified by the anonymity and speed of chat-based platforms.

Telegram’s Structural Vulnerability

The platform’s architecture — minimal moderation, easy account creation, and bots that can be programmed to deliver automated grooming scripts — made it a uniquely efficient recruitment tool. Unlike traditional social networks, Telegram’s design prioritizes privacy and automation, allowing bad actors to scale predator-like interactions across hundreds of users simultaneously. The Investigative Committee noted that the bot actively used for dating was repurposed without technical hurdles, underlining how default permissiveness can become a national-security liability.

Durov’s Legal Escalation: From France to an International Warrant

Pavel Durov now faces parallel legal jeopardy in two jurisdictions. In France, his 2024 arrest centered on alleged complicity in enabling illegal content and organized crime through insufficient cooperation with authorities. Russia’s new charge of complicity in terrorism represents a far more severe escalation, potentially carrying a life sentence. While Durov’s legal team has previously argued that imposing responsibility on a platform founder for user actions sets a dangerous precedent, the sheer scale and tangible harm of the alleged teen recruitment campaign may test that defense.

Broader Implications for Encrypted Platforms

The case intensifies a global debate about whether end-to-end encrypted messengers should be compelled to scan for criminal exploitation, especially involving minors. Governments in the EU, India, and now Russia are leveraging high-profile incidents to demand “lawful access” or mandatory content moderation. If Durov is convicted or even indicted in multiple states, it could embolden regulators to impose strict liability on platform architects, reshaping the technical and business model of secure messaging.

Guarding Against Digital Grooming: What Changes Now

• For parents and educators: the “Daivinchik” case demonstrates that teenagers are being targeted through seemingly innocent dating bots. Conversations that begin with flirtation but rapidly ask for location, school details, or photos should be treated as grooming attempts and reported to local police immediately.
• For teenagers: Russian investigators emphasized that simply sending a geolocation or photo does not automatically make you a criminal. However, any subsequent threats from strangers claiming you are “already guilty” are a hallmark of psychological manipulation — cut contact and tell a trusted adult or the authorities.
• Legal protection in Russia: Article 31 of the Russian Criminal Code states that a person who voluntarily and definitively abandons a crime before completion is exempt from liability. The Investigative Committee explicitly reminded teenagers that coming forward proactively can protect them from prosecution — a detail that parents and schools should communicate clearly.
• For platforms: the ability to deploy bots for targeted, coercive recruitment exposes a gap in Telegram’s content-safety framework. Even without breaking encryption, platforms can implement real-time anomaly detection on bot behaviour, especially when bots are linked to reported accounts or produce scripted grooming patterns. The Russian investigation’s push to block the specific bot sets a regulatory precedent for mandated bot shutdowns in security cases.