Telegram disappeared from Apple's App Store on the night of Monday, August 3, after an Apple content review found child sexual abuse material (CSAM) on the platform. The app was back roughly 40 minutes later, once Telegram deleted the content and banned the account that posted it. A day later, Telegram founder and CEO Pavel Durov gave the takedown a very different framing: he says the material was planted by a blackmailer trying to get the app removed.
The removal only hit the iPhone and iPad App Store. Telegram stayed available on the Mac App Store and Google Play throughout.
What Apple and Telegram each said
Apple's statement was short and unusually direct for a takedown of an app this large. "We briefly removed Telegram from the App Store after our review found content that violates our strict guidelines prohibiting child sexual abuse material," the company said. "The app was subsequently restored after the developer promptly removed the content and banned the user who posted it."
Telegram's reply, issued the next morning, narrowed the incident to a single account: Apple reported one user sharing CSAM, and that user was banned immediately. The company also pointed at the scale of its own moderation, saying it has removed more than 337,900 CSAM-related groups and channels in 2026 alone. Telegram's own safety page puts the running figure at 337,942 channels blocked this year, a number it credits to hash-matching databases it expanded in 2024 with groups including the Internet Watch Foundation. Hash matching works by comparing a fingerprint of an uploaded file against a list of fingerprints of known illegal images, so the file can be caught without a human viewing it.
Telegram also posted a pointed question on X, asking whether Apple would apply the same standard to every other app in the store.
Durov's extortion claim
On August 4, Durov said the account behind the material was a "takedown extortionist: someone who demands ransom from group owners in exchange for not targeting their communities." According to Durov's account of the incident, the attacker used a technical trick to slip past Telegram's moderation: instead of posting fresh content, they edited an old message inside an active group chat to insert the illegal image.
That detail matters. Because the message was backdated, it sat far up the chat history where members would not scroll past it, so nobody in the group saw it and nobody reported it. Durov called it "backdated, effectively invisible content" and argued it is an edge case rather than a sign that public groups are full of this material.
He also said Apple removed the app before contacting Telegram, and warned that the same trick is a "potential systemic risk for every mobile app that hosts user-generated content." Apple has not commented on the extortion claim.
What this means for Filipino Telegram users
Nothing changed on Philippine phones — the outage was short enough that most users here would not have noticed, and installed copies of the app kept working the whole time. The interesting part is the regulatory backdrop.
Telegram spent the first months of 2026 under direct pressure from Philippine regulators. The Department of Information and Communications Technology (DICT) and the Cybercrime Investigation and Coordinating Center (CICC) publicly weighed blocking the app over online gambling, scams, piracy, and the online sexual abuse and exploitation of children (OSAEC), calling a ban a last resort. A key complaint was that Telegram had no local office, which made it slow to answer Philippine law enforcement.
That standoff ended in February, when DICT and CICC reached an agreement with Telegram instead of banning it. Under that deal Telegram runs a 24/7 helpdesk for illegal-content reports, sends DICT and CICC monthly figures on takedowns and enforcement, and affirmed a zero-tolerance stance on OSAEC and illegal gambling. Filipino users can report illegal activity on the platform directly to 1326@dict.gov.ph.
So this week's incident is a useful test of that arrangement from the other direction: the removal came from Apple, not from a government, and it was resolved in under an hour. If Durov's description is accurate, it also shows that a single determined bad actor can weaponise an app store's enforcement against a platform serving hundreds of millions of people — including a very large Philippine user base that regulators here are already watching closely.
What is still unclear
Apple has not said how the material was surfaced, whether the review was triggered by a report, or how many countries saw the app disappear. It has not responded to Durov's extortion allegation at all. Telegram, for its part, has not published evidence of the ransom demands Durov described. Both sides agree on the sequence — content found, app pulled, content removed, app restored — and disagree on almost everything about why it happened.