Telegram API Question posted in
A comprehensive official documentation can be found here.

Telegram Bot sometimes requires User Authentication – Telegram API

When I access to my telegram-bot, after some time, it requires user authentication with the text:

"Stand by…
Hi there!
Before We Can Continue We Need To Verify That You’re a REAL User"

When this message appears it seems session is closed, and the user can’t receive Bot notifications, until user authenticates.

I can’t understand why this authentication is required if I am storing each user telegram_id.

Tags:

6

Answers


  1. Chosen as BEST ANSWER
    0

    I discovered what was wrong!

    Lev Vasilyev answer made me think if somebody was able to get my bot_token. So, I changed it. And, the authentication message no longer appeared.

    It´s important to get into telegram allowed devices, and delete not authorized accesses.


  2. 0

    My bot has ""Stand by… Hi there! Before We Can Continue We Need To Verify That You’re a REAL User" too.
    When I proceed and send authentication code and sms from Telegram was received I had been authorized as Samsung Galaxy s20 5g from Seychelles ip adress which was not mine… This was very strange. If anybody had that experience please post your answer too. Maybe somebody had stolen my bot …Sorry if my English not very correct and nice. I hope you understand.

    Login or Signup to reply.
  3. 0

    Just had the same issue!

    I guess, someone scraped my bot-token from public repository and tried to steal my account. NEVER leave your bot-token in public rep!!!

    Detailed description for others to find this thread:

    1. Bot sent, what it was programmed to do and then

      "Hi There!
      Before We Can Continue We Need To Verify That You’re A REAL User"

    2. Telegram sent me login code -> I entered it (yeah, I’m dumb)

    3. Bot printed

      "Please reply with your 2FA (Two Factor Authentication / Two Step Verification) code"

      then

      "Timeout has been reached , pleaase try again."

    (I like the pleAAse part, where you understand it was totally fake)

    Telegram said it was

    Device: Android
Location: Bulgaria (IP = 185.95.157.122)
    Login or Signup to reply.
  4. 0

    Your bot token might have exposed on git.

    You need to change the token.

    Instead of hard coding it in the code, pass it as an environment variable.

    Login or Signup to reply.
  5. 0

    I had the same problem, changed the Token and resolved the problem. I needed set the webhook again to work.

    Login or Signup to reply.
  6. 0

    All replies are correct:
    your token has been stolen and used by hackers, once you enter your credentials – you will see unknown sessions in your telegram.

    Change token via BotFather and do not publish it in public places.
    If you have already put your cred’s to the telegram bot – you need to change the password immediatelly.

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search