Private or public Telegram group: what changes for spam and security

What is the difference between a public and a private group?

The difference is one thing: a username.

A public group has a username and a short link, such as t.me/yourgroup. Telegram's FAQ describes the result in one sentence: anybody can view the group's entire chat history and join to post messages. Usernames appear in Telegram's global search, so a public group can also be found by people who were never given the link.

A private group has no username. It is reached through invite links, which are long and random. A person who does not hold a link cannot find the group and cannot read it.

Everything else follows from that. The type decides who can find the group, who can read it, and which door spam accounts use. It does not decide how well the group is moderated.

Who can find and read each kind of group?

	Public group	Private group
Address	A username and a short t.me link	Invite links only
Found in Telegram search	Yes	No
Read without joining	Yes, the entire history	No
Earlier messages for new members	Always visible	The admins choose: visible or hidden
Join	Anyone, unless member approval is on	Anyone who holds a working invite link
Approval at the door	Approve New Members, for the whole group	Request Admin Approval, set on each invite link

Two rows deserve a closer look.

Reading without joining. In a public group, the history is open to every Telegram user. Turning on member approval does not close it. Telegram describes approval in public groups as reviewing new members before they can write in the chat. A scammer who wants to study your members, copy an admin's name and photo, or learn how your team talks can do all of that from outside. See the fake admin scam for how that information is used.

Earlier messages. Telegram lets a group choose whether new members can see messages sent before they joined. This choice exists only while the group is private. A public group cannot hide its history from newcomers, because the history is already open to everyone.

How do spam accounts arrive in each kind?

In a public group, they find you. The group is in search, and its link is short and easy to collect. Scripts join public groups in large numbers with bought accounts. Nobody has to leak anything. This is why public groups see the most spam, and the most raids.

In a private group, someone brings them. A spam account needs a working invite link. It gets one when a member reposts the link in another chat, when the link is published on a website or in a social media profile, or when a member's own account is stolen. Telegram's FAQ is clear about how open a link is: anyone who has Telegram installed can join by following it.

So a private group with a widely shared link is not private in practice. It is a public group that is harder to search for.

Three things are the same in both kinds:

• Accounts that wait. An account that joins quietly and posts a week later passes any door.
• Private messages to members. Once an account is inside, it can read the member list and write to members directly, unless the list is hidden.
• Stolen member accounts. A real member whose account is taken over is already inside.

How to stop spam bots covers the settings for these.

Which Telegram tools work in each kind?

Most of Telegram's protection does not depend on the type. A few tools do.

Tool	Public group	Private group
Approve New Members	Yes	No. Telegram's developer pages say join requests for the whole group can only be enabled in public groups.
Invite links with Request Admin Approval	Yes, on additional links	Yes, on additional links
Additional invite links with a name, a time limit or a limit on uses	Yes	Yes
Seeing which members joined through which link	Yes	Yes
Revoking an invite link	Yes	Yes. This is the main control a private group has.
Hiding earlier messages from new members	No	Yes
Restrict Saving Content	Yes	Yes
Aggressive Anti-Spam	Groups with over 200 members	Groups with over 200 members
Hiding the member list	Groups with 100 or more members	Groups with 100 or more members
A Guardian bot that processes join requests	Yes	Where join requests exist, which means on approval links

Some notes on the table.

Approval works differently. In a public group, one switch sends every newcomer to a waiting list. In a private group there is no such switch. You create additional invite links and turn on approval for each one. Your main link stays open unless you stop sharing it. The join requests guide explains both forms and what an admin sees when reviewing a request.

Restrict Saving Content is for groups whose content should stay with members. Telegram says it restricts forwarding from the chat, prevents screenshots, and limits saving media. It can be switched on in a public group too, but it gives little there, because anyone can already read the chat.

Size rules are the same. Telegram's announcement of Aggressive Anti-Spam gives one condition, more than 200 members. It does not mention the group type.

Removing an account works the same way. A banned account goes on the Removed Users list. While it is there, it cannot rejoin through an invite link. The person behind it can still try with a different account, which is why a leaked link should be revoked and not only cleaned up after.

How do I switch between public and private?

The setting is called Group Type. Telegram's own instructions place it under Group Info > Edit > Group Type. The exact labels differ a little between the phone and desktop apps.

From private to public. You choose a username, and the group gets its short link. Before you do it, know what changes:

• The entire chat history becomes readable by anyone, including messages written while the group was private. Read back through it first. Delete phone numbers, wallet addresses, internal plans and anything members wrote because they believed the room was closed.
• Earlier messages can no longer be hidden from new members.
• The group can now be found in search. Expect more joins and more spam from the first day.
• Turn on Approve New Members at the same moment, not a week later.

From public to private. The username is removed, and the group is reached through invite links again. Three cautions:

• People who already joined stay. Going private removes nobody.
• Anything that was copied or forwarded while the group was public stays copied.
• The short link stops leading to your group. Telegram's pages do not say that a released username stays reserved for you, so assume someone else can take it. Update every place where the old link is printed.

Switching type does not replace cleaning up. If spam accounts are already inside, remove them first. How to remove spam bots from a group has the steps.

Which type fits my community?

These are our recommendations, not Telegram rules.

Community	Type	Setup
Public project community: a token, an open-source project, a brand	Public	Approve New Members on. Limits on what newcomers can send. Member list hidden once you have 100 members. Aggressive Anti-Spam once you have more than 200. A pinned message that says admins never write first.
Paid or member-only group	Private	One named invite link per source, each with Request Admin Approval, and a limit on uses where you can. Restrict Saving Content on. Earlier messages hidden from new members if the archive is part of what people pay for.
Team or working group	Private	No approval needed. Send the link directly to each person and revoke it afterwards. Remove people on the day they leave the team. Protect every admin account with two-step verification.

Public project community. Being found is the purpose, so public is the right choice. Accept that everything written there is published. Keep support conversations, wallet questions and anything personal out of the main chat. Most of the risk to your members comes from private messages by accounts that copied an admin, and no group setting reads those messages.

Paid or member-only group. The link is the product's lock. Never post it publicly, and never reuse one link for every buyer. Named links show you where a leak came from, and you can revoke that single link without breaking the others.

Team group. The risk here is not spam. It is an old member who was never removed, or a link that still works in an old email. Check the member list and the list of invite links every month.

Where does a bot fit in?

Neither type removes the need to read what is posted. A public group lets everyone reach the door. A private group moves the door to a link that can leak. In both, an approved account can post a scam a week later.

Targa checks every message and every edit in the groups it is added to, including text and QR codes inside images, and it screens join requests as a Telegram Guardian bot. If you want to watch it first, shadow mode removes nothing and logs what it would have done. The free plan gives core protection: the join, the rules and the account checks. From Starter, Targa's comprehensive review also catches new and disguised scams, not only known patterns, and Targa reads pictures; the plans list the rest. Targa is in private beta, so access is by request.

To see what your group shows to an outsider today, run the free group check.