Help W11 evidence: October 23, 2026 (spam restrictions, deleted messages, sign-in)

This public ledger backs three sections written for user questions the data agent could not answer: Why can I only send messages to mutual contacts?, Can I get back deleted messages, chats or files? and Can I sign in with my password or my email instead of the code?. Luckgram source links are pinned to iOS f75b666 (2.6.4, origin/master on October 23) and Android 56701eb (origin/master on October 23). A string in public source shows what a client can display; it does not prove that a given installed release shows it. Accounts, restrictions and moderation are Telegram’s: Luckgram is an independent Telegram client. Official pages (telegram.org/faq, telegram.org/faq_spam, telegram.org/privacy, core.telegram.org/api/auth, core.telegram.org/api/srp and two telegram.org blog posts) were fetched on October 23, 2026.

Both new accounts sections sit at the end of the page, so the sections above keep their positions.

Why can I only send messages to mutual contacts?

Page Statement Evidence
help/groups-and-channels.md Telegram restricts an account when people mark its messages as unwanted and moderators agree FAQ: Can’t send messages to non-contacts (“When users report unwanted messages from a Telegram account, we apply a limit”) · Spam FAQ: What happened to my account? (“If the moderators decide that the messages deserved this, the account becomes limited temporarily”)
  Private messages to someone who has not saved your number fail with “Sorry, you can only send messages to mutual contacts at the moment.”; “restricted from posting to public groups” can appear too iOS strings:1752 (Conversation.SendMessageErrorFlood) · iOS strings:3872 (Conversation.SendMessageErrorGroupRestricted) · shown on a failed send: ChatControllerLoadDisplayNode.swift:5411-5420 · Android strings:1360 (NobodyLikesSpam1, same text) · FAQ: non-contacts (“Reported accounts can only send messages to people who have their number saved as a contact”)
  On iPhone and iPad, More Info in that alert opens @SpamBot iOS strings:1753 (“More Info”) · ChatControllerLoadDisplayNode.swift:5442-5444 (openPeerMention("spambot")
  Still allowed: people who saved your number; replies to whoever writes first Spam FAQ: So I can’t send messages anymore? (“Limited accounts can send messages to people who have their number saved as a contact. You can also always reply to anyone who messages you first.”)
  The first time it most likely ends after a few days; each repeat lasts longer, possibly for good; no early end on request Spam FAQ: What do I do now? (“most likely your account will be limited for a few days or so”, “Repeated offences will result in longer periods”, “you may lose the ability to do so forever”) · Spam FAQ: release me sooner (“this is impossible”)
  A mistake: write to @SpamBot; a new account can be restricted because of a previous owner or a virtual number Spam FAQ: certain I didn’t break any rules (“please contact our @SpamBot”) · Spam FAQ: just signed up (“due to their previous owners‘ activities or due to them being certain virtual/VOIP numbers”)
  Frozen account: the chat list says Your account is frozen; you can read but not send FAQ: What is a Frozen Account? (“If your account has been restricted because of reports from other users, your account is frozen”, “you can still read your chats, but you cannot send messages or post content”) · iOS strings:14139-14140 · ChatListNoticeItem.swift:351-352 · iOS strings:14128-14129 · Android strings:9650-9658
  Tap the notice for details and Submit an Appeal; the appeal goes through @SpamBot before the date shown, or the account is deleted iOS strings:14140 (“Tap to view details and submit an appeal.”) · iOS strings:14130-14132 (“Appeal via @SpamBot before %@, or your account will be deleted.”) · AccountFreezeInfoScreen.swift:164-176 (date from freezeUntilDate) · AccountFreezeInfoScreen.swift:194 · Android strings:9659-9661 · FAQ: Frozen Account (“You can appeal the restriction directly from the app”)
  Some people accept messages only from contacts and Telegram Premium subscribers; the app says only Premium subscribers can message them; that is their choice iOS strings:11183 (“Only Premium users can message %@”) · shown on a failed send: ChatControllerLoadDisplayNode.swift:5433-5436 (.nonPremiumMessagesForbidden) · Android strings:7732 (“only accepts messages from contacts and Premium users”) · Android strings:3598 (“You can restrict incoming messages to only contacts and Premium users.”)
  Others ask for Telegram Stars for messages from people not in their contacts FAQ: Can’t send a message, I am being asked for Stars (“Some users charge a small fee” in Telegram Stars “for messages from people who are not in their contacts”)
  The restriction is on the Telegram account, so every Telegram app shows it FAQ: Can’t send messages to non-contacts (“we apply a limit: Reported accounts can only send messages…”); the alert above is Telegram’s own text in Luckgram’s strings

Can I get back deleted messages, chats or files?

Page Statement Evidence
getting-started/accounts.md Once both sides have deleted a message, it is deleted for good Privacy Policy 10.2 (“As soon as your partner deletes it too, it’s gone forever.”)
  After deleting a chat or leaving a group Luckgram briefly shows Undo; the chat is removed only when the bar goes away iOS strings:4133-4135 · iOS strings:4139-4140 · ChatListController.swift:6360-6375 · ChatListController.swift:6386-6395 (if value == .commit … removePeerChat) · Android strings:241 · Android strings:254
  Deleted only for yourself: the other person keeps their copy Privacy Policy 10.2 (“a copy will stay on the server as part of your partner’s message history”)
  A public group or channel can be found in search and anyone can join; a private one needs an invite link iOS strings:2046 (“Public groups can be found in search, chat history is available to everyone and anyone can join.”) · iOS strings:1646 · Android strings:508-509 · FAQ: invite links (“Anyone who has Telegram installed will be able to join your group by following this link.”)
  An admin can add you back only if you are mutual contacts iOS strings:1567 (“if a person left a group, only a mutual contact can bring them back”)
  Earlier messages after rejoining depend on the group’s history setting FAQ: groups and channels (“toggle persistent history to control whether or not new members have access to earlier messages”)
  Saved Messages is your own cloud storage and only you are in it, so a deleted file cannot be restored; an original saved from another chat stays there Blog: Albums, Saved Messages (“your personal cloud storage”; a “go to” button “takes you to the right place in the chat where it was originally posted”) · Blog: Saved Messages 2.0 (“Every Telegram user has a chat called Saved Messages”) · Privacy Policy 10.2 (“gone forever”)
  Media saved with Save to Camera Roll / Save to Gallery / Save to gallery are copies in the gallery iOS strings:728 · iOS strings:6802 · SaveToCameraRoll.swift:167-186 (PHPhotoLibrary.shared().performChanges, creationRequestForAsset…) · Android strings:3311
  Delete for both: Delete for me and name (iOS) or Also delete for name (Android); no mark; Telegram cannot restore them iOS strings:2301-2303 · iOS strings:4427 · Android strings:4054 · FAQ: Can I delete my messages? (“deleted messages do not leave a mark in the chat”) · Privacy Policy 10.2 (“any party can choose to delete any messages in one-on-one chats, both sent and received, for both sides”; “gone forever”)
  A copy saved earlier, such as a chat export, keeps the messages help-telegram-basics-2026-10-13.md, row “messages the other person later deletes for both sides stay in a copy saved before”
  Secret chats: deleting a message deletes it for the other side too Privacy Policy 10.2 (“In secret chats, deleting a message always instructs the app on the other end to delete it too.”)
  In a group you can delete only your own messages FAQ: Can I delete my messages? (“in groups, it’s still your own messages only”)

Can I sign in with my password or my email instead of the code?

Page Statement Evidence
getting-started/accounts.md Signing in takes the login code; with Two-Step Verification its password comes after the code, not instead of it FAQ: How does 2-Step Verification work? (“Once enabled, you will need both an SMS code and a password to log in.”) · API: 2FA (after the code, “SESSION_PASSWORD_NEEDED may be returned, if the user has two-factor authentication enabled”) · iOS strings:1369 (“Two-Step Verification”)
  Telegram chooses where to send the code API: Code types (“The system will automatically choose how to send the authorization code”)
  The chat with Telegram (blue check) in any app where you are already signed in FAQ: Getting a code via Telegram (“If you have recently used one of our apps on another device (it could also be a different app on the same device)”; “You will find it in the chat with Telegram, a verified profile with a blue check”) · iOS strings:427 · Android strings:37
  SMS, or a call where offered; Didn’t get the code?, then SMS if offered API: Code types (auth.sentCodeTypeSms, auth.sentCodeTypeCall) · FAQ: phone call (“may be unavailable for particular carriers”) · iOS strings:428-429 · iOS strings:2150 · iOS strings:3879 (“Get the code via SMS”) · Android strings:52-53
  Email, if Telegram asked for a login email; it asks when you sign in often; the screen shows Check Your Email; the address only receives the code API: Code types (“if the user logs in often enough, Telegram will ask the user to verify an email that will be used to send the login code”; auth.sentCodeTypeEmailCode: “the code was sent to the configured login email”) · API: Sending a verification code (auth.sendCode starts from the phone number) · iOS strings:8130-8131 · iOS strings:8137-8138 (“Change your email address for Telegram login codes.”)
  The recovery email for the password is not a way to sign in; at sign-in it helps only after the login code, to reset the password FAQ: 2-Step Verification (“a recovery email address that will help regain access, should you forget your password”) · API: Email recovery (“from non-logged in sessions if the user has successfully provided the login code”) · reset steps: accounts.md § I forgot my two-step verification password, backed by help-telegram-basics-2026-10-13.md

Not written for lack of a source

Statement Why
Telegram keeps no server backup from which support can restore deleted messages No fetched page says it in those words; the page says only what the privacy policy states (“gone forever”)
How long the Undo bar stays on screen Not read from source; the page says “briefly”
A device photo library keeps deleted photos for a while Not a Telegram or Luckgram source
Signing in again on a device with a saved session asks only for the password (future auth tokens) Documented for the API (API: Future auth tokens) but not a choice shown to users; left out

Sourced, but left out so other answers keep their rows

The data agent’s ranking gate (scripts.eval --all --check and scripts/rank_probe) compared each draft with origin/master. These sourced statements were removed because their words took rows that other pages answer.

Removed statement Source Why
Clear Cache under Settings → Data and Storage → Storage Usage frees device space only; cloud chats and media stay FAQ: How do I log out? (“Clear cache to free up space on your device without logging out”) · iOS strings:810 · iOS strings:814 Took app-restart and cache rows
Group admins see deleted messages in Recent Actions for 48 hours Privacy Policy 10.2 (“stored for 48 hours after deletion in order to be shown in admins’ Recent Actions panel”) · iOS strings:2697 Took “recent” rows
A passkey created while signed in can replace the code; the password is still asked FAQ: What is a Passkey? · iOS strings:15566 · AuthorizationSequencePhoneEntryControllerNode.swift:597-601 · Android strings:13 Moved passkey probes that have no label
iPhone and iPad: change the login email in Settings → Privacy and Security → Login Email iOS strings:8137-8138 · PrivacyAndSecurityController.swift:732-739 Took 2FA-setup rows that name privacy settings
“Two-step verification” in the sign-in heading n/a Took 2FA-setup and forgotten-password rows; the heading now reads “password”, and Two-Step Verification stays in the text
Anchor links from the new sections to “I forgot my two-step verification password” and to the mutual-contacts section n/a The search indexes a link’s address, so the anchor words counted as the section’s own; plain references replace them