What are critical security messages?

Whenever something changes that could let someone move your money, the bot sends you a Telegram message about it. These are critical messages: unlike ordinary payment alerts, they arrive even if you’ve turned Telegram notifications off in Settings. You cannot mute them, and that’s deliberate.

What triggers one

Every change to a confirmation factor:

• A PIN set, changed, removed, or reset via an email code.
• Face ID / fingerprint enabled on a device, or turned off.
• A backup email verified, or changed — the message names the new address and when it will be able to authorize a PIN reset.

Every change to the withdrawal allow-list:

• The allow-list switched on, or an address saved to it.
• A switch-off scheduled, with the time it takes effect — your window to undo it.
• The allow-list now off.

How to read them

They’re written to be acted on. A message about something you just did is a receipt — nothing to do. A message about something you didn’t do means someone else is operating your account, and the message usually tells you the one action that helps most: cancel the withdrawal, re-enable the allow-list, change the email back, reset the PIN.

If you get one you didn’t trigger

1. Cancel what’s cancellable first. A scheduled withdrawal can be stopped from the app; a scheduled allow-list switch-off is undone by re-enabling it.
2. Take back the PIN — see Changing or resetting your PIN.
3. Check Security for a backup email you don’t recognize, biometrics enrolled on a device that isn’t yours, and allow-list addresses you didn’t save.
4. Contact support through the official bot @tgpaycryptobot — never through someone who messaged you.

Ordinary notifications

Everything else — deposits credited, transfers received, invoices paid, and the scheduled large-withdrawal message (see Why a large withdrawal is scheduled instead of sent) — is a normal notification and follows the Telegram notifications toggle under Settings → Notifications. Turning that off quiets your payment alerts and leaves the security messages above untouched — but it also quiets the withdrawal-delay alert, so if you rely on that safety window, keep notifications on.