Durov targets EU's encryption rollback, but the file has been open for years

Pavel Durov, the founder of the messaging app Telegram, accused European Union institutions on 10 July 2026 of using "procedural tricks once linked to banana republics" to advance surveillance legislation, framing the comment in a public post that circulated through crypto-press channels the same day. Cointelegraph's news desk picked up the line on 10 July 2026 at 21:54 UTC, distributing it into a feed already crowded with Telegram's own attempts to position itself as a defender of encrypted communications.

The line is provocation more than policy. But the underlying argument is older than Durov's post, and the file he is complaining about has been open in Brussels for the better part of three years. The question of whether Europe will require platforms to scan private messages for child-sexual-abuse material, and on what legal basis, has been quietly redrawing the line between user privacy and state access to communications. Durov's intervention lands in the middle of that fight.

What Durov actually said

The Telegram chief's complaint was procedural, not substantive. He did not name a specific directive, regulation, or member-state holding the presidency. He alleged that the EU is advancing surveillance law through mechanisms normally associated with governments that lack normal legislative channels. The phrasing, as reported by Cointelegraph, was concise: "procedural tricks once linked to banana republics are now being used in the EU to pass surveillance laws."

The post matters because it puts the weight of a large platform behind a complaint that civil-society groups, security researchers, and a coalition of member states have been making in more measured language for months. Durov's choice of register, deliberately combative, is unusual for a chief executive who usually stays out of EU institutional fights. The timing, on a Thursday evening in mid-July, suggests a calculated pitch to a crypto and privacy-policy audience in continental Europe. Cointelegraph's news tape carried the item at 21:54 UTC on 10 July 2026.

The file that has been open since 2022

The background matters here. The European Commission's original proposal for a regulation laying down rules to prevent and combat child sexual abuse, presented in May 2022, would have allowed platforms to scan private messages for known and new CSAM material on a voluntary basis, with an obligation that several members of the European Parliament and several member-state governments have signalled they would like to convert into a mandatory regime. The Council of the EU has revised the text multiple times. The most recent public round of negotiation, as documented across European wire reporting, has involved a Spanish presidency compromise that narrowed the scope of detection orders and the type of evidence required to issue one.

Durov's "banana republic" frame is therefore not a comment on a single vote. It is a complaint about how the file has been steered through successive presidencies, trilogues, and Council working-group compromises without an uncontentious final text. Procedural tactics in Brussels rarely look dramatic in the moment: a recital swapped for a recital, a recitals-vs-articles move, a working-group note circulated to capitals before a public debate.

The counter-read from EU institutions

EU officials have, in background briefings across multiple outlets since 2024, pointed out three things. First, the proposal is the lawful child-protection measure of an elected legislature and an elected Commission, sitting inside the EU's ordinary legislative procedure, with all the normal layers of transparency. Second, the contested piece is detection technology, not blanket surveillance: the Commission has repeatedly framed the proposal as targeted, court-supervised, and limited in scope. Third, member states have the right to insist on higher child-safety standards and have used that right to push for mandatory, rather than voluntary, obligations.

That counter-read sits awkwardly beside Durov's framing. The institutions are right that the process is not hidden; the trilogue log is published, the Council's general approach is published, and the Parliament's mandate was debated openly. The institutions are also right that the underlying policy dispute is a real one, not a procedural artefact. But Durov's complaint lands precisely because the substance of what the EU is doing reads, to a privacy-sceptical audience, like a departure from how Brussels has handled encryption in the past.

What it means for Telegram and the wider market

Telegram has a complicated position in this debate. It is the messaging app most often named in European law-enforcement requests, partly because of its user base, partly because of its earlier reluctance to add end-to-end encryption to one-to-one calls and groups. In 2024, Durov was arrested in France and placed under formal investigation in connection with alleged complicity in the operation of an online platform that allowed illicit transactions, image-based offending, and organised crime. He has since leaned publicly into the privacy-rights register.

The implications for the broader crypto and platform market are tighter. If the EU's regulation lands in a form that requires client-side scanning of private messages, the operational cost for any platform that handles European traffic is a build-out of detection infrastructure that the largest centralised exchanges, payment apps, and wallet front-ends already run. Smaller European platforms, particularly the privacy-preserving ones, would face a compliance bill that they have so far avoided.

The 10 July 2026 post is unlikely to move votes in Brussels. It may, however, do something more useful for Telegram's strategic position: it draws a privacy constituency that has so far been fragmented across parties and member states into a single political line. The next dates to watch are the Council's next working-group meeting on the file and any Commission communication that follows the European Parliament's most recent report.

The nuance worth holding is straightforward. Durov speaks for himself and for his company. The "banana republic" line is rhetoric, not evidence of a specific procedural abuse. The substance of the EU's surveillance debate is real, contested inside the institutions, and worth arguing about on its merits rather than on the temperature of the commentary around it.

Desk note: this piece traces a 10 July 2026 Cointelegraph wire item back to a procedural debate inside the EU's child-protection file. The platform-policy angle sits on top of an older Council fight rather than displacing it; Monexus framed the story accordingly.

Wire provenance

This editorial synthesis draws on the following public wire/social posts:

• https://t.me/s/cointelegraph