1. Requiring a unique phone number for signup, and heavily restricting accounts which appear to have used a VOIP phone number for signup (including Google Voice numbers). Restricted accounts can't initiate conversations, so they can't really send spam.
2. Allowing users to report spammers that get past #1, and limiting the accounts of users that get reported.
For details, see: https://telegram.org/faq_spam