Pavel Durov wades into Telegram's encryption row with the EU

Pavel Durov's account posted a sharp rejection of EU scanning demands on 11 July 2026, casting the bloc's latest push to read encrypted private messages as a trick played on European users by their own governments. The post, time-stamped 17:30 UTC on the OSINTLive Telegram feed, lands as the European Commission negotiates with member states over a measure that would oblige messaging services to detect child-sexual-abuse material (CSAM) on private channels, not just open public ones. Telegram, the platform Durov founded, is the largest messaging app in the EU with roughly 75 million monthly users and the only one of the major Western services that has never implemented client-side message scanning by design.

The intervention matters less for the technical argument, which is familiar, and more for who is making it. Durov is a French citizen, holding a passeport issued in 2018, currently navigating an ongoing French judicial investigation into the platform's moderation practices. The Telegram post arrives as Brussels considers whether compliance with EU scanning rules should be a precondition for operating inside the bloc, and as France's DGSI and the Paris prosecutor's office continue to press for a formal judicial dialogue with the company. Durov is arguing his case on the EU's preferred public square while inside a French criminal perimeter.

What Durov actually claimed

In the Telegram post on 11 July, Durov wrote: "Yes, Telegram won't scan your private messages, no matter what banana-republic tricks the EU uses." The line is blunt by Durov's standards, which tend toward long-form manifestos. Stripped of the invective, the claim has two parts: that Telegram's architecture makes wholesale client-side scanning of private chats infeasible, and that even if EU pressure forced a choice, the company would rather withdraw a service than build the capability. That posture is consistent with what the company told French magistrates in 2024-25, when executives argued under oath that Telegram's encryption layer was designed by a small team in Dubai and is structurally distinct from the E2EE used by Signal and WhatsApp.

The framing shift is notable. Theo's earlier commentary on EU rules leaned on technical inability. The 11 July post leans on refusal. The two are legally different. "We cannot" sidesteps liability; "we will not" puts the company in direct collision with EU law. That distinction will be central when, not if, the Commission moves from negotiation to enforcement.

The EU law that Durov is dismissing

The legislative vehicle is the so-called "CSAM" regulation, a draft the Commission first published in 2022 and has been revising under successive presidencies. The current text, agreed in Council working parties earlier in 2026, would require platforms hosting more than 1 million monthly European users to deploy "technically feasible" detection on all communications, including one-to-one private chats, with client-side scanning on devices as one acceptable method. Privacy advocates including the German Digitale Gesellschaft and the French La Quadrature du Net have challenged the draft before the General Court of the EU on proportionality grounds, arguing that there is no reliable technology that can scan E2EE traffic without breaking the encryption that protects everything else.

EU officials counter, in language that has hardened across two Council presidencies, that detection obligations should apply to all serious messaging apps regardless of architecture, and that the bloc is prepared to use its digital markets and digital services framework to compel compliance. The Netherlands and Ireland, home respectively to Telegram's European legal entity and to most Apple and Meta engineering, have been the loudest internal critics. Germany and France, the two member states with the largest user bases, have been the clearest backers.

Why Durov is taking the fight to Brussels now

Two timing factors stand out. First, Durov's French legal exposure narrowed in spring 2026 when a Paris judge refused a prosecutors' request to add new charges of complicity in drug trafficking, leaving the file focused on the original 2024 allegations of failure to cooperate with French authorities. That procedural win has given the founder rhetorical room to argue that France is pressing his company into an EU-wide duty that the French courts themselves have not imposed on him. The second factor is competitive: WhatsApp is preparing a feature for European business users that mirrors the EU's scanning demand, and Signal's leadership has signalled willingness to withdraw from the European market rather than comply. Durov is positioning Telegram as the only Western-mass app that will refuse on principle.

The corollary is a smaller story with bigger stakes. If Telegram does withdraw, the EU loses its largest non-Big-Tech US-adjacent messaging service. The market share would flow to Meta's WhatsApp and to Tencent's WeChat, both of which already operate in Europe and both of which the CSAM regulation technically already covers. European officials who have pushed hardest for the law have been quiet about this concentration risk in public. Durov is now making it the story.

The sovereignty frame and the structural read

The "banana republic" phrasing is not incidental. It encodes a sovereignty argument the platform has run since at least 2024: that European regulators are demanding capabilities from foreign tech companies that European states never impose on their own domestic police and intelligence services. French and German interior ministries, for instance, retain statutory authority to intercept communications under judicial warrant. The Brussels proposal would, in this reading, extend a sovereign power to private intermediaries without corresponding oversight on the state side. The argument is contestable, child-protection law is a separate doctrinal track from intelligence interception, but it has stopped being academic.

The structural pattern sits inside a broader realignment. Encrypted messaging was a Western-civil-society product built after the 2013 Snowden disclosures, largely by American and European engineers hostile to US state power. The current EU proposal asks European users to trust that the same European states that responded to Snowden with court oversight are now safely running scanning on every personal chat. That is a credibility claim, and Durov is testing it in public. The structural frame, stripped of rhetoric, is whether platform governance over private communications will be drawn as a sovereignty right (states, via legal process, can compel disclosure) or as a marketplace obligation (platforms must police their own channels as a condition of operating). The 11 July post pushes Durov decisively toward the first framing and against the second.

What happens next

EU working parties are expected to send a revised text to the Council in autumn 2026, with the Parliament voting in early 2027. If the final law preserves the client-side scanning requirement, Telegram faces a choice: comply, contest in EU courts alongside La Quadrature du Net and the German Digitale Gesellschaft, or withdraw from the European market altogether, as some French diplomats privately anticipate. The French judicial file, dormant but not closed, complicates each option. A withdrawal would also withdraw the platform's precarious defence inside the French system. A continued fight inside Europe, conversely, gives Durov the audience he has just discovered he can address.

The 11 July post is best read as the opening bid in that sequence. The Dutch, Irish, German and French positions will harden across late summer; the Commission's digital team will have to decide whether it is prepared to lose a 75-million-user platform to enforce a rule the bloc's own privacy agencies call technically incoherent. The contested facts, whether Durov's legal exposure makes him a credible messenger for European users, whether Telegram's architecture is genuinely distinguishable from competitors', will do more to settle the outcome than the legal text.

This piece describes a developing dispute between the European Commission, the governments of France, Germany, Ireland and the Netherlands, and the platform Telegram, viewed through on-platform statements by company founder Pavel Durov on 11 July 2026. The sources do not specify the current status of the underlying French judicial proceedings or the latest Council working-party text; those details are reported elsewhere in the wire and await confirmation.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/s/osintlive
• https://en.wikipedia.org/wiki/Pavel_Durov
• https://en.wikipedia.org/wiki/Telegram_(software)
• https://en.wikipedia.org/wiki/CSAM_scanning_proposal