- The 2022 standard advice — "buy proxies, write unique text" — no longer works in 2026. SpamBot went through 3 generations of upgrades.
- What works today — 3 layers: behavioral warmup (not time), Spintax+LLM on content, human-like cadence on send.
- Do only 1 of 3 — minimal result. 2 of 3 — miss 30-50% of risk. All 3 — flying below radar.
- In TG:ON, the whole stack is three checkboxes in the UI. Building it yourself — 60-90 hours of dev work.
Honest secret rarely mentioned in media-buying courses: Telegram's SpamBot doesn't stand still. Over 4 years it went through at least three major refactors. What worked in 2022 gave 50% ban rate in 2023, 80% in 2024, and in 2026 means almost guaranteed ban within 48 hours.
Three key shifts:
- 2022 → 2023: content hashing added. Identical texts from different accounts get grouped → collective ban.
- 2023 → 2024: ASN / IP range scoring. DC proxies (AWS, DigitalOcean) got a lowered "trust rating".
- 2024 → 2026: behavioral signals (session entropy, cadence patterns, fingerprint stability). This is what courses still don't cover.
The 2026 working methodology consists of three independent layers, each addressing its own defense vector.
Step 1: Warmup through behavior (not time)
Classic advice: "buy an account, let it sit for 14 days, then start". That worked against SpamBot v2, when decisions were made on age-based metrics. Today it's a waste of time.
New mechanics: Telegram measures account "trust" by accumulated behavioral history. An account that's been empty for 30 days and then starts mass-sending is a red flag. An account that was actively used for 3 days (feed scroll, reading, reactions, occasional messages to contacts) — already "trusted", even if age is lower.
What counts as behavioral activity
| Action | Frequency for real user | Signal |
|---|---|---|
| Open app + session start | 5-15/day | Baseline engagement |
| Scroll chat list | 10-30/session | Browsing activity |
| Open message | 5-20/session | Reading |
| React to message | 1-5/day | Engagement depth |
| Send message to contact | 2-10/day | Normal usage |
| Receive + reply | 0-5/day | Real conversation |
Warmup scheme: over 3-5 days you emulate real activity at these frequencies, at different hours, in realistic sessions (15-45 minutes each). Telegram "sees" a normal user.
Key change: 3 days of behavioral warmup > 14 days of "passive sitting". Less time, better result.
Step 2: Spintax + LLM on send
Detailed mechanics — in the conversion article. Short version:
- Spintax in every template — at least 4-5 variable blocks, each with 3+ options. Kills content hash collision.
- LLM rewriting — 20-30 base variants adapted to the niche of the channel where the lead was found. Prompt includes context from the latest channel post.
- Personalization — name, channel mention, relevant hook from recent messages.
Why it works against SpamBot: it searches for repetition at the hash level. When every message is unique and contains relevant context — the bot can't cluster them as "mass outreach".
Step 3: Human-like rate limiting
Third layer — the sending rhythm. Not "how often", but "with what distribution".
Typical mistake: 100 messages exactly at 60-second intervals. Another: 100 messages by random.uniform(30, 90). Both are bot patterns SpamBot learned to detect.
Correct distribution — log-normal, with parameters:
Plus — typing indicator for 1-4 seconds before sending (shows "typing..." to the recipient). Small detail, but plays double duty: affects the recipient's perception AND Telegram's behavioral signal.
Time-of-day distribution
A real user doesn't send 100 messages in a row at 14:00. They spread them across 3-4 active windows throughout the day: morning (9-11), lunch (13-14), evening (18-21). Your outreach should follow this pattern.
How these 3 layers work together
Important: each layer is necessary but insufficient. Without any single component, the whole stack fails.
Proxy (residential IPs) is the fourth hidden layer I didn't put in the headline. It solves network-level detection. Without it, three layers still work but worse.
How it assembles in TG:ON
In the UI — three settings panels:
- Accounts → Warmup profile. Choose "3 days / 5 days / 7 days", service does the activity itself. Configure which hours and which actions (reactions, reading).
- Campaign → Content. Template with spintax (editor with live preview). LLM rewriting (connect your API or use built-in).
- Campaign → Schedule. "Conservative / Balanced / Aggressive" cadence. Sending schedule by day and hour.
Everything launches → the service does the rest. If an account catches FLOOD_WAIT — automatic pause. If PEER_FLOOD — exclusion from the campaign until human review.
TG:ON for macOS · Windows · Linux
Desktop app, 160 MB. Runs locally, your keys stay yours. 3-day trial, no credit card.
Download for free3 layers. 3 checkboxes.
3-day trial.
Warmup + Spintax+LLM + Cadence — set up in 15 minutes. Run a campaign on 500-1000 messages and see the real bounce rate.
Start trial