How to buy a Telegram account without getting burned

Session + JSON, tdata or a login code: what each Telegram account format gives you, what should change hands, and how escrow protects the payment.

EA@EPICSWP
Aug 31, 2026
6 min read
16 views

Why there's a market for Telegram accounts

Telegram has grown from a messaging app into a place where communities, media channels and automated services run. That created a second-hand market for accounts with some history behind them, or with API access already set up. Buying one without safeguards is risky: sellers can take the account back, sell the same account twice, or hand over a login that stops working a week later.

If you want a ready-made channel instead, the Telegram channels marketplace lists those separately.

The three Telegram account formats

When you buy a Telegram account, you're buying more than a username and password. The format decides how you get access and how secure that access is.

1. Session + JSON

This is the usual format for accounts used through the API. You get a session file (usually .session) and a JSON file with the API ID, API hash and phone number. You load them into a Telethon or Pyrogram client and have full API access. It suits automation, bots and running accounts from scripts.

The upside is full control from your own code, with no SMS codes needed once it's set up. The catch is that a seller who kept a copy of the session can still use the account. Escrow helps, but you have to end the seller's session yourself before you confirm the deal.

2. TData (Telegram Desktop data)

tdata is the folder Telegram Desktop uses to store its login. When you buy a tdata account, you get that folder (usually named tdata), put it in your Telegram Desktop directory, and the next time you open the app you're logged in as that account.

It's simple for non-technical buyers, works with the official desktop app and needs no API setup. It is tied to the desktop app, though. To use the account on your phone, log in there with the account's number and read the login code Telegram sends to the desktop app. And if the seller kept a copy of the folder, they can still log in.

3. Login code (phone number + password)

This is the plain account: a phone number (often a virtual one) and a password. You request a login code, which arrives by SMS or as a Telegram message, and log in on any device. It's the most portable format, and the riskiest if the seller can still receive messages on that number.

It works on any device, and you can set your own two-step verification password straight away. The weak point is the number, because whoever controls it can request login codes. If the number stays with the seller, set your own two-step verification password and a recovery email at once, and move the account to a number you control if you can.

FormatBest forSecurity levelMain riskTransfer effort
Session + JSONAutomation, bots, API useMedium (depends on ending the seller's session)The seller kept a copy of the session fileMedium (needs API setup)
TDataDesktop use, non-technical buyersMedium (the folder can be copied)The seller kept a copy of the folderLow (copy the folder)
Login codeMobile use, personal accountsLow to medium (depends on the phone number)The seller, or the next owner of the number, requests login codesLow (log in and set your own password)

Prices depend on the account's age, history and extras.Single accounts are listed on the Telegram accounts page.

What should change hands at transfer

A proper transfer is more than a file drop. From a seller who knows what they're doing, expect:

  • The full login, meaning the phone number (if it's included), the password, the two-step verification password and any recovery email.
  • The session files or the tdata folder, depending on the format.
  • For session + JSON accounts, the API ID and hash, with instructions for using them.
  • Time before you confirm to set your own two-step verification password and recovery email, and to end every session that isn't yours. Telegram won't let a session that's less than 24 hours old end other sessions, so if you logged in fresh, plan for that wait.
  • Confirmation that the account isn't tied to any other recovery method.
  • A seller who stays reachable in the deal chat while you check that everything works.

What you don't get: the SIM card for the original number (unless you buy a number separately), any promise that Telegram won't ban the account later (if it breaks Telegram's rules, that's on you), or proof that the seller didn't keep a copy of the session. That last one is why escrow matters.

How escrow takes the trust problem out

In a direct deal, you send money and the seller sends files. If the seller is dishonest, you've lost the money and have nothing to show for it. Escrow changes who carries the risk. On EPICSWP:

  1. You place an order and pay, and the money is held in escrow.
  2. The seller delivers the account in the agreed format (session, tdata or login code) in the deal chat.
  3. You check it: log in, make sure the session works and that the login details are right.
  4. If everything is fine, you confirm receipt and the money goes to the seller. If not, you open a dispute before confirming, and a moderator reviews the deal chat and the evidence and decides.

The escrow fee is 6% of the price. The buyer pays it, and it's lower on the paid Gold and Platinum memberships. In return, the seller doesn't see the money until you confirm, and any disagreement goes to a human moderator.

Say you buy a session + JSON account and the seller's session is still active after the handover. Take a screenshot of the active sessions list and open a dispute before you confirm. The moderator looks at that and at the deal chat, and decides what happens to the money.

Red flags when buying Telegram accounts

  • A price far below similar listings usually means a stolen or recycled account.
  • The seller refuses escrow and wants to be paid directly. Walk away.
  • The seller can't prove ownership. Ask for a screenshot of the account's settings or a short live video of the account, and if they can't provide either, assume they don't own it.
  • The seller can't explain how you'll log in or which files you'll get, which usually means they haven't done this before.
  • The password was changed just before the sale, which can mean the account was stolen. Ask about the account's history, and check the active sessions list once you're in.

How a purchase goes, step by step

This is a realistic run-through of buying a session + JSON account on EPICSWP.

  1. You browse the marketplace and filter by format and price. You find a two-year-old session + JSON account that runs a 500-member niche group, priced at $40.
  2. You place the order and pay the $40 plus the 6% escrow fee ($2.40), $42.40 in total. EPICSWP holds the money.
  3. The seller sends a zip file in the deal chat with the .session file, a config.json with the API details and a README with instructions.
  4. You test the session with a Telethon script. You can log in and see the account's profile, chats and group. Everything looks right.
  5. You set your own two-step verification password and recovery email, then end every other session through the API or from the Devices list in Telegram's settings. If Telegram refuses because your session is too new, wait until it's 24 hours old and try again.
  6. Once only your own sessions are left, you confirm receipt. The seller gets paid, and you're done.

If the session had failed to connect, you'd open a dispute instead. A moderator would look at your error output, what the seller delivered and the deal chat, and decide.

What affects the price

There's no fixed price list for Telegram accounts. What moves the price:

  • Session + JSON and tdata accounts usually cost more than a bare login code.
  • An older account with real chats behind it costs more than a fresh one.
  • Telegram Premium is paid for by whoever bought the subscription, so check how long it has left before you pay extra for it.
  • Accounts on virtual numbers are cheaper, but the provider can recycle the number, and whoever gets it next can request login codes. Set a recovery email and your own two-step verification password so the number alone isn't enough to take the account.

Bulk listings (10 or more accounts) are usually priced per account, and the total depends on quality. Check the seller's feedback and past sales on the marketplace before you buy in volume.

FAQ

Is it legal to buy a Telegram account?

Telegram's Terms of Service don't mention buying or selling accounts. They do forbid using Telegram to spam or scam people, and Telegram can ban accounts that break its rules. In most places buying an account isn't a crime, and the real risk is losing it, so don't use it for anything that breaks Telegram's terms.

What happens if the seller tries to reclaim the account after I buy it?

If it happens before you confirm, open a dispute and include the evidence, such as a login alert or a session you don't recognize. A moderator reviews it and decides what happens to the payment. After you confirm, the money has gone to the seller, so end the seller's sessions and set your own password and recovery email before you confirm. Without escrow, you'd have no recourse at all.

Can I use a session+JSON account on my phone?

Usually, yes. Log in on the phone with the account's number. Telegram sends the login code to the account's existing sessions, including the one in your session file, so you can read it from your script. If the account has a two-step verification password, you'll need that too, so make sure the seller hands it over.

#buy telegram accounts#telegram account formats#escrow#session json#tdata
Share: