Launch Telegram and tap the ☰ menu (top-left on Android/Desktop) or go to Settings (bottom-right on iOS).
On iOS, the Settings tab is the gear icon in the bottom navigation bar.
2
Go to Privacy and Security
Scroll down and tap Privacy and Security.
3
Tap 'Calls'
Under the Privacy section, tap Calls.
4
Set 'Who Can Call Me' to My Contacts
Change the setting from Everybody to My Contacts.
This blocks all calls from anyone not saved in your phone contacts.
5
Set Peer-to-Peer to 'Nobody'
Still inside Calls, find the Peer-to-Peer option and set it to Nobody.
Peer-to-Peer (P2P) routes calls directly between devices, which exposes your IP address to the caller. Setting this to Nobody forces all calls through Telegram’s servers, hiding your IP — at a slight cost to call quality.
Spammers find Telegram users by running phone numbers from data breaches through Telegram’s API. Hiding your number cuts off this discovery method.
1
Open Privacy and Security
Navigate back to Settings → Privacy and Security.
2
Tap 'Phone Number'
Tap Phone Number under the Privacy section.
3
Update Both Visibility Settings
Set the following:
Setting
Recommended Value
Who can see my phone number?
Nobody
Who can find me by my number?
My Contacts
Setting “Who can find me by my number?” to Nobody means even people who have your number saved cannot find you on Telegram. Use My Contacts if you want friends to be able to reach you.
Scroll down to find Messages (also listed as Who can send me messages on some versions).
3
Set to 'My Contacts'
Change the option to My Contacts.This prevents unknown accounts and bots from sending you unsolicited messages or call requests.
Telegram Premium users get an additional option: Nobody — which allows only contacts to message you while still letting you initiate conversations with anyone.
Spam callers sometimes impersonate legitimate contacts after hijacking an account. Two-step verification (2FA) protects your account from being taken over.
1
Go to Two-Step Verification
Navigate to Settings → Privacy and Security → Two-Step Verification.
2
Set a Password
Create a strong, unique password. This is required in addition to your SMS code on new logins.
3
Add a Recovery Email
Provide an email address for account recovery in case you forget the password.
Use an email address you actively monitor. Without recovery access, a forgotten 2FA password can permanently lock you out of your account.
No. Telegram does not send any notification when you block a user. They will simply be unable to call or message you, and your profile will no longer be visible to them.
Can spammers still find me if my number is hidden?
If your number is set to Nobody and your username is removed or set to private, you become effectively undiscoverable to strangers. Spammers rely on either phone number lookups or public usernames to find targets.
Does setting calls to 'My Contacts' affect calls from known contacts?
No. Anyone saved in your phone contacts can still call you normally. The setting only blocks calls from people who are not in your contacts list.
What is the Peer-to-Peer setting and why does it matter?
By default, Telegram calls can connect directly between devices (P2P), which exposes both parties’ IP addresses. Setting P2P to Nobody routes all calls through Telegram’s relay servers, hiding your IP at the cost of slightly higher latency.
I still receive spam after changing these settings. What else can I do?
Remove your public username temporarily (Settings → Edit Profile → Username → clear it)
Check Active Sessions (Settings → Privacy and Security → Active Sessions) and revoke any unrecognized devices
Report the spam account to @SpamBot
Consider enabling Telegram Premium for the Nobody message restriction option
Will Kreo ever ask me to enter my private key anywhere?
No. We will never ask for money, we will never ask for your keys. Nobody from the team.