Telegram serves as the engine room for modern celebrity-themed cyber fraud. Unlike centralized platforms with aggressive real-time URL scanning, private Telegram channels offer threat actors an environment where moderation takes days to catch up with reported abuse.
Links promising the full Katy Cardona video consistently force visitors through private group invite links. Once inside, an automated channel bot prompts the user to verify their age or unlock the media file by subscribing to four or five unrelated sponsor channels. These secondary channels run dubious crypto-pump schemes, online gambling services, or predatory loan operations. In more aggressive attacks, the bot sends an external authorization prompt requesting the user's phone number or login verification code, compromising the victim's own Telegram account to propagate the scam to their personal contact list.
