Telegram Ads Compliance Audit 2026: Which Operators Include Required Disclaimers — and Which Don't

Key finding#

In our archive of 912 indexed Telegram ad creatives, 63% of financial product ads targeting EU audiences include mandatory risk disclaimers — compared with only 8% of the same brands' creatives targeting non-EU audiences. This gap is not coincidence. It is regulatory arbitrage in practice: the same advertiser, running the same product, deliberately stripping legal disclosures the moment they exit the jurisdiction that enforces them.

This audit documents what that looks like — across verticals, operators, and geographies.

---

Why Telegram specifically#

Most compliance research focuses on Google Ads or Meta Ads, where platform-level enforcement creates a floor of accountability. Telegram's sponsored-message system has no such floor. There is no centralized creative review, no automated disclaimer detection, and no mechanism to match an advertiser's creative to their regulatory status in a given country.

This creates a uniquely measurable environment for compliance researchers: the absence of platform enforcement means that advertiser behavior is the only compliance signal. What ends up in a creative is what the advertiser chose to put there — or chose to omit.

Our archive currently holds 912 distinct ad creatives across 557 identified advertisers, spanning 12 active advertising markets. This audit covers the subset of creatives where compliance signals are detectable: financial products (crypto, forex/CFD), gambling and sports betting, and binary options.

---

Compliance taxonomy by regulatory regime#

The table below defines what "compliant" means in each major jurisdiction that generates significant Telegram ad volume. Penalty figures and enforcement rates are estimated from public enforcement actions and regulator annual reports.

Regime	Jurisdiction	Required elements in advertising	Penalty for non-compliance	Enforcement rate in Telegram (estimated)
MiCA	EU-27	Risk disclosure sentence, CASP license number, no guaranteed-return language	Up to €5M or 3% of turnover	Low — ESMA guidance issued, national NCAs enforcement patchy
MiFID II / ESMA	EU-27	"Capital at risk" warning, leverage cap stated (30:1 retail), CFD/spread-betting label	€1M+ per violation (varies by NCA)	Moderate — FCA/AMF most active, CySEC lenient
FCA (UK)	United Kingdom	FCA registration number, "your capital is at risk", no "free" trading language	Unlimited fines, criminal prosecution	Low on Telegram — FCA has no Telegram channel-monitoring program
ANJ (Autorité Nationale des Jeux)	France	ANJ license number, "Jouer comporte des risques" warning, gambling helpline 09 74 75 13 13	Up to €100K + license revocation	Very low — enforcement targets French-language channels only
SEBI	India	SEBI registration number, investment risk warning in advertised language	₹25 crore max + criminal referral	Minimal — no Telegram monitoring disclosed
ASIC	Australia	AFS license number, "general advice warning", TMD documentation link	AUD $1.1M per violation	Low — ASIC focuses on website/app, not messaging-platform ads
CVM / BCB	Brazil	CVM registration, risk disclosure, no guaranteed-return language	BRL 500K+	Emerging — BCB crypto framework (2023) still ramping enforcement
SIC (Portugal)	Portugal	SRIJ license number, "o jogo pode criar dependência" warning	Up to €44.9M	Low on Telegram — SRIJ monitors licensed sites

Interpretation: The regulatory frameworks are well-defined. The enforcement gap on Telegram is structural — regulators have not built monitoring programs for messaging-platform sponsored content. Advertisers who know this can and do exploit the gap.

---

Per-vertical compliance scorecard#

Compliance scores below are based on presence or absence of detectable compliance signals in creatives from that vertical targeting a given audience type. Score of 10 = full disclosure present in all sampled creatives; 0 = no disclaimers, no license references, no risk language detected across the sample.

Vertical	Audience type	Compliance score (0–10)	Primary failures observed
Crypto exchanges (Binance, OKX, Bybit)	EU-targeted	7.2	Missing CASP registration numbers in banner text; risk warning present but in microprint footer of landing page, not creative
Crypto exchanges	Non-EU (RU/TR/ID)	1.8	No risk disclosure; "earn X% APY" claims; referral bonus as primary CTA
Forex/CFD brokers (XM, Exness, FBS)	EU-targeted	6.1	Leverage cap stated (30:1); "capital at risk" present; but some omit broker registration number from creative
Forex/CFD brokers	Non-EU offshore	0.9	1:1000 leverage advertised without warning; "guaranteed signals" claims; no broker entity disclosed
Gambling operators (Winamax, Betano, 1xBet)	Licensed markets (FR/PT/BR)	6.8	License number present; some missing mandatory helpline number
Gambling operators	Grey markets (CIS, IN, unreg.)	1.1	Bonus-first creative; no warning language; sponsor described as "entertainment"
Binary options (Quotex, Pocket Option)	All markets	0.4	"98% payout" claims; no risk disclosure; no regulatory status; operator entity obscured
Trading signals / copy-trading	All markets	0.7	"Verified 97% win rate" claims; no SEBI/FCA registration; no risk warning
P2P crypto / informal exchanges	All markets	0.0	No entity; no disclosure; no contact; designed to avoid traceability

Key finding: Binary options and trading-signal operators are the most systematically non-compliant vertical in the Telegram advertising ecosystem. Their average compliance score of 0.4 reflects near-total absence of any regulatory disclosure, across all observed geographies.

---

Named advertiser examples: compliant operators#

Binance (EU — MiCA)#

Binance's German-targeted creatives (indexed in our archive under the binance.de affiliate trail) include:

• A risk disclosure sentence in the body text of the creative itself — not relegated to a landing page
• No APY or yield percentage claims in the creative headline
• "Binance Germany (BaFin-registered)" as the stated entity in the sponsor footer
• Absence of "earn guaranteed" or "100% bonus" language

The creative CTA reads "Start trading — capital at risk" rather than "Earn more." This is the MiCA-compliant template. The same advertiser's Turkey-targeted creatives (same Binance brand, Binance.TR entity) show none of these elements.

Compliance signal: Risk disclosure in creative body + entity named + no guaranteed-return language.

Trade Republic (BaFin / MiFID II)#

Trade Republic, the Berlin-based neobroker, runs creatives in German and occasionally French that consistently include:

• BaFin license reference (BaFin-ID 10155371) in the sponsored footer
• "Investments involve risk of loss" in German (Investieren birgt Verlustrisiken) as a standing line
• No stock-picking or return predictions
• CTA focused on product feature ("zero commission") rather than return promise

Trade Republic is the benchmark for MiFID-II-compliant Telegram creative construction. Their creative format is replicable by any licensed EU investment firm.

Compliance signal: License number + mandatory warning + feature-based CTA (no return claim).

Winamax (ANJ — France)#

Winamax is the most consistently ANJ-compliant gambling advertiser in our French-language sample:

• ANJ license number present in every indexed creative
• Mandatory warning "Jouer comporte des risques : endettement, isolement, dépendance" or truncated equivalent
• Responsible gaming helpline 09 74 75 13 13 present (though sometimes only on landing page, not creative — a marginal case)
• Creatives target explicitly French-language channels, consistent with ANJ territorial scope

Winamax shows that full compliance is operationally achievable within Telegram's character-limited creative format. The license number and warning together add roughly 120 characters — feasible in any sponsored-message layout.

Compliance signal: ANJ license number + mandatory warning sentence + helpline reference.

Betano (SRIJ — Portugal)#

Betano (operated by Kaizen Gaming) targets Portuguese-language audiences with creatives that include:

• SRIJ license number (SRIJ-POC-2020/0004 or equivalent reference)
• "Jogo pode criar dependência. Linha de apoio: 1414" helpline reference
• Age restriction signal ("+18" in creative)
• No guaranteed-payout or guaranteed-win language

Portugal's SRIJ framework is one of the more operationally specific licensing systems, and Betano's creative execution reflects the compliance investment of a licensed operator protecting its license.

Compliance signal: License number + helpline + age gate + no payout claims.

---

Named advertiser examples: non-compliant operators#

Quotex (no jurisdiction, "98% payout" claims)#

Quotex is a binary options platform operating through Awesomo Ltd (St. Vincent and the Grenadines) — a jurisdiction with no financial services regulatory framework for binary options. In 22 Quotex creatives indexed in our archive:

• Zero include a risk disclosure of any kind
• 18 of 22 include a "payout" percentage claim (range: 92%–98%)
• None identify the legal entity operating the platform
• None include a license number (because no relevant license exists)
• CTAs uniformly promise earnings: "Earn up to 98% on every trade"

Binary options are banned outright in the EU (ESMA prohibition, 2018, renewed annually), prohibited for retail clients in the UK (FCA ban, 2019), and considered fraudulent instruments by IOSCO. Quotex's Telegram creatives are designed for audiences in markets where no active prohibition exists: primarily CIS, Southeast Asia, and Latin America.

Non-compliance signal: Payout percentage claim as headline + no entity + no risk disclosure + SVG-jurisdiction operator.

1xBet (bonus-first, no risk warning — CIS targeting)#

1xBet is the dominant sports betting advertiser in CIS-market Telegram channels by volume. Their Russian-language creatives consistently follow a formula:

• Welcome bonus as the primary (often only) message: "Up to 100,000 RUB bonus on first deposit"
• No responsible gambling warning
• No license reference in CIS-targeted creative (1xBet has no valid Russian license post-2020 RKN sanctions; their Curaçao license is irrelevant to Russian regulatory requirements)
• No helpline reference
• The advertised CTA goes directly to a bonus claim page, bypassing any terms disclosure

In contrast, 1xBet's Brazil-targeted creatives (where they hold a provisional SIGAP sports betting license) include "Jogue com responsabilidade" and a reference to their BR entity. The gap between CIS and Brazil creative standards for the same operator is structurally identical to what we observe across the full dataset.

Non-compliance signal: Bonus-only CTA + no license reference + no responsible gambling language in a market where the operator lacks a valid license.

Unlicensed binary options (unbranded "signals" operators)#

A distinct category of non-compliant creative in our archive: unbranded or lightly-branded accounts promoting binary options under the guise of "signals" or "trading tips":

• No company name, no entity, no contact
• Claims: "92% win rate, verified" / "Join 50,000 profitable traders"
• Creative often uses a screenshot of a filled trading account as social proof
• No platform named — user is directed to Telegram channel, then to binary options platform via affiliate link
• Affiliate link structure obscures which platform receives the deposit

These creatives are designed to evade any advertiser-level compliance obligation. They represent the floor of Telegram advertising: anonymous distribution of unlicensed financial product promotion.

---

The dual-track pattern: same brand, different rules by geo#

The clearest evidence of intentional regulatory arbitrage is the dual-track pattern: a single advertiser running systematically different creatives in regulated vs. unregulated markets. We document three named examples.

XM Trading: CySEC-compliant EU vs. 1:1000 leverage offshore#

XM Group (Trading Point of Financial Instruments Ltd) is a Cyprus-regulated forex broker with CySEC license 120/10. Their EU-targeted creatives follow MiFID II requirements:

• "CFDs are complex instruments. 75.3% of retail investor accounts lose money" (or equivalent percentage)
• Leverage stated as "up to 30:1 for retail clients" (the EU retail cap)
• CySEC license reference in footer
• Risk disclaimer present before CTA

Their offshore-targeted creatives (targeting channels in Southeast Asia, Middle East, CIS) are a different product:

• "Up to 1:1000 leverage" as a headline feature
• No loss-rate disclosure
• No license reference
• Return-focused CTA: "Trade with more power"

XM is not unique in this behavior — it is the industry norm for multi-jurisdictional forex brokers. What makes XM documentable is the volume: we have sufficient EU vs. non-EU creative samples to establish the pattern with confidence.

1xBet: bonus-only in RU vs. responsible gambling in BR#

As noted in the advertiser examples above, 1xBet's Russian-language CIS creatives are structurally non-compliant even by the most permissive reasonable standard: no operator identity, no responsible gambling language, no limit references. Their Brazilian Portuguese creatives show the opposite: license number, responsible gambling warning, operator identity, age restriction.

The operational implication: 1xBet has a compliance team capable of producing compliant creatives. They choose not to deploy that capability in markets where enforcement is absent.

Binance: MiCA risk disclosure in DE vs. aggressive P2P copy in TR#

Binance's Turkey-targeted creatives (Binance.TR, which operates under MASAK and SPK oversight but with lighter retail investor protection requirements than EU) regularly include:

• P2P trading as a primary CTA — "Buy and sell directly with zero commission"
• High-yield staking features advertised with APY figures (sometimes 12–18% APY on stablecoin products)
• No risk disclosure sentence in the creative body
• Brand-only attribution (no entity named)

The German-targeted creatives for the same period omit APY figures entirely and lead with "safe, regulated, BaFin-registered." The contrast is not subtle. It reflects precisely calibrated response to jurisdiction-specific regulatory risk.

---

How to detect compliance signals in Telegram ads#

This section is a practical guide for compliance teams, journalists, and researchers using the Telegram Ads Spy archive or any other source of Telegram creative data.

1. Risk disclaimer text#

Look for the following phrases (or near-equivalents) in the creative body or image:

• Crypto: "Trading in crypto-assets involves substantial risk" / "Value can go to zero" / "Your capital is at risk"
• Forex/CFD: "CFDs are complex instruments" + loss-percentage figure (e.g., "74%–80% of retail accounts lose money")
• Gambling: Market-specific warning phrases (see ANJ/SRIJ/DGOJ requirements; all have mandatory warning text)
• Investment: "Past performance is not indicative of future results"

Absence of these phrases in a financial-product creative targeting an EU or UK audience is a primary compliance signal.

2. License numbers in creative or footer#

Compliant operators in licensed markets include their license number. Format varies by regulator:

• CySEC: Three-digit number (e.g., 120/10, 405/21)
• FCA: Six-digit FRN (e.g., FRN 583263)
• BaFin: BaFin-ID (eight digits)
• ANJ: Reference format (e.g., ANJ-2021-GOL-033)
• SRIJ: SRIJ-POC-YYYY/#### format

No license number in a creative from a financial product advertiser is a red flag, not proof of non-compliance (some compliant operators put the number only on the landing page). But presence of a license number is strong positive evidence.

3. Gambling helpline numbers#

Every licensed gambling regulator in Europe requires responsible gambling messaging, including a helpline number. These are nationally specific:

• France: 09 74 75 13 13 (ANJ helpline)
• Portugal: 1414 (Jogo Responsável line)
• Spain: 024 (national mental health / gambling helpline)
• Italy: 800 274 274 (Gioca Responsabile)
• UK: 0808 8020 133 (GamCare)

Presence of the correct national helpline number in a creative targeting a French, Portuguese, Spanish, Italian, or UK audience is strong evidence of a licensed operator. A gambling creative with no helpline number targeting these audiences is operating either unlicensed or out of compliance.

4. Leverage caps stated#

MiFID II and equivalent frameworks cap retail client leverage for forex/CFD products. The EU retail cap is 30:1 for major currency pairs, lower for commodities and crypto. If a creative advertises leverage higher than these caps to a European audience — 1:500, 1:1000 — either the advertiser is targeting professional accounts (which requires separate disclosure) or the advertiser is non-compliant.

Leverage figures stated in a creative are therefore a compliance signal: 30:1 or lower = plausibly EU-compliant; 500:1 or higher in EU-channel context = non-compliant.

5. APY / yield claims and caveats#

MiCA prohibits specific return promises for crypto products targeting EU audiences. SEBI prohibits guaranteed-return language for Indian investment products. Any creative including a specific APY figure (e.g., "Earn 18% APY") without an explicit caveat ("rates variable, capital at risk") is likely non-compliant in any developed regulatory market.

APY claims with no caveat are the single most common compliance failure in our dataset for crypto advertisers targeting non-EU audiences.

6. CTA language#

Compliant CTAs tend to be feature-oriented: "Start trading," "Open account," "Learn more." Non-compliant CTAs tend to be return-oriented: "Earn 98% profit," "Get your bonus," "Turn $100 into $1000." The CTA is the highest-visibility element of the creative and the first thing compliance researchers should read.

---

Methodology#

Archive composition#

This audit draws on the Telegram Ads Spy archive as of April 2026: 912 indexed ad creatives across 557 identified advertisers. Creative attribution follows these steps:

1. Ingest: Gramesh API (/channels.getSponsored) captures sponsored messages across a pool of 9,074 monitored channels. Each unique creative (identified by random_id primary key and text_hash secondary dedup) is stored once.
2. Vertical classification: Regex-based niche classifier assigns each creative to a primary vertical (crypto, forex/CFD, gambling, etc.) with confidence score.
3. Geo attribution: Advertiser geo intent is inferred from (a) the language of the creative, (b) the language profile of the channel in which it appeared, and (c) the presence of geo-specific elements (license numbers, local helpline numbers, local currency references).
4. Compliance signal detection: A regex pattern library matches known compliance signals: risk disclaimer phrases (per-regulator phrase lists), license number formats (per-regulator regex), helpline numbers (exact match by country), leverage cap figures, and prohibited claim patterns (payout percentages, guaranteed-return language).

Limitations#

• Creative text only: Compliance signals present exclusively in creative images (image-based text, banner overlays) are not detected by the current text-only classifier. Image OCR is on the product roadmap. This means compliance scores are lower-bound estimates — some image-embedded disclosures are not counted.
• No landing-page analysis: Some operators include required disclosures on landing pages rather than in the creative itself. Regulatory frameworks vary on whether creative-level disclosure is required or whether landing-page disclosure is sufficient. This audit scores creative-level signals only.
• Inferred geo intent: We cannot confirm advertiser targeting parameters; geo is inferred, not observed from campaign settings.
• Sample size variance: Some verticals (crypto exchanges) have significantly more samples than others (prop trading, consumer lending), affecting confidence in scores.
• Snapshot in time: Compliance posture changes. An advertiser who was non-compliant in March 2026 may have updated their creative set by the time this audit is read. The archive timestamps each ingest event.

Manual QA#

Automated scoring was followed by manual review of 50 randomly sampled creatives from the flagged population (creatives where automated score and human expectation diverged). Manual review adjusted 9 creative scores — primarily cases where an image-embedded disclaimer existed that the text classifier missed (false negative) or where a license-format string appeared in the creative as a fake reference (false positive, caught by cross-referencing public license registries).

---

Structural conclusion#

The compliance picture in Telegram advertising in 2026 is bifurcated. Licensed operators in regulated markets — Binance Germany, Trade Republic, Winamax, Betano — produce measurably compliant creative content. The compliance investment is real: it requires legal review, creative templating, and ongoing monitoring of regulator guidance. These operators comply because the license they depend on creates enforcement leverage.

Unlicensed operators and licensed operators operating outside their home jurisdictions face no equivalent enforcement pressure on Telegram. The result is a systematic compliance gap that follows jurisdiction boundaries with near-perfect fidelity. This is not primarily an advertiser ethics failure; it is a regulatory coverage failure. Telegram's sponsored-message system is a compliance black box that no regulator currently monitors at scale.

The data in this archive is a partial remedy to that monitoring gap. Creative text, ingest timestamps, channel language, and entity-level patterns are all observable. This audit demonstrates that compliance signals — and their absence — are detectable from the creative content alone, without access to campaign dashboards, targeting parameters, or advertiser contracts.

Regulators, compliance teams, and journalists who want access to the raw creative data can query it via the public API.

---

How to Cite This Audit#

Telegram Ads Spy research (2026). Telegram Ads Compliance Audit 2026: Which Operators Include Required Disclaimers — and Which Don't. tgadsspy.com. https://tgadsspy.com/blog/telegram-ads-compliance-audit-2026

Raw creative data available via public API. License: CC-BY-4.0.

tgadsspy research (2026). Telegram Ads Compliance Audit 2026: Which Operators Include Required Disclaimers — and Which Don't. tgadsspy.com. Retrieved from https://tgadsspy.com/blog/telegram-ads-compliance-audit-2026