Have I been pwned?

Pwned_robot's own profile states its function directly: "Telegram Bot that you can check if you have an account or password that has been compromised in a data breach." In practice that means one thing: you send an email address — your own — and it checks that address against known, previously published breach datasets, telling you whether it has appeared in one.

This is the correct, safe shape for a "leak check" tool: it takes an identifier you already control (an email address) and tells you a yes/no fact about public breach records, the same category of service as the well-known haveibeenpwned.com website. It is not a tool for looking up someone else's personal information, and it should never ask you to type in an actual password as "verification" — if any bot in this category ever does that, stop and treat it as a red flag regardless of what it claims to check.

As with any unofficial third-party bot in the security space, there's no way to independently audit what happens to the email address after you send it, so treat the result as informational rather than authoritative, and prefer changing a password proactively over trusting a "not found" result completely. If a breach is confirmed, change that password immediately and turn on two-factor authentication wherever the affected account supports it.