Linking#
- Open the “Telegram” tab in the panelClick “Link Telegram”.
- Follow the linkThe link is one-time and valid for 15 minutes — the bot opens, press “Start”.
After linking, panel sign-in is confirmed with a code from the bot, and password management is available in the bot itself.
If you unlink Telegram, sign-in goes back to password only.
What the bot can do#
The bot has one command — /start, which opens the main menu. In the menu:
| Button | What it does |
|---|---|
| Sign in to the panel | A one-time link: opens the panel right away, without a password and without a code from the bot. A new one (including after /start) cancels earlier links. |
| Statistics | A summary: today, 7 days, total (amount and number of deals), requests in progress, online, paid and awaiting payout. Days are counted in Moscow time, while the panel uses UTC, so “today” may differ. |
| Notifications | Turns each notification type on and off. |
| Change password | Issues a new password; all panel sessions are closed and you have to sign in again. |
At the top of the menu the bot shows your login and current password — tap them to copy.
Notifications#
| Notification | When it arrives |
|---|---|
| New request | A seller created a request on your domain. |
| Request completed | The deal went through; the notification shows the amount and your share. |
| Payout | The status of your withdrawal changed. |
| Support message | A seller wrote in the chat. |
Each type is turned on and off separately: in the panel (the “Telegram” tab, the switches) and in the bot itself.
The bot also reports when there is a problem with your domain (taken down by the registrar, flagged as dangerous, not opening) and when the domain is fine again — see If something goes wrong.
Sign-in security#
- The code from the bot. The six-digit code is valid for 5 minutes and you get 5 attempts to enter it. Only its fingerprint is stored.
- Protection against password guessing. After 5 wrong passwords in a row sign-in is locked for 15 seconds, and every next mistake doubles the pause — up to an hour.
- Session. You stay signed in to the panel for up to 30 days; the sign-out button in the header closes it immediately.
- The bot chat = access to the panel. The “Sign in to the panel” button and the shown password work for anyone who opens your chat with the bot, so do not leave Telegram unlocked and do not hand over your session.
- API key. If you issued a key in the “API” tab, treat it like a password: if you suspect a leak, click “Regenerate”.
Never share your password or codes from the bot — not even with someone who claims to be the ZFlow team.