Discord Scams: Fake Nitro, “Accidental Report” DMs and More

The most common Discord scams are fake Nitro gift links, “I accidentally reported you” messages that push you to contact a fake Discord staff member, malicious links and “try my game” files that steal your account, fake Steam trades and votes, and QR code login tricks. If you’ve been targeted, don’t click, scan or download anything, never share your password or codes, change your password if you entered it anywhere, save evidence and report the account. If anyone under 18 is being pressured for images, go to our sextortion help guide and NCMEC’s CyberTipline.

Most Discord scams arrive from a friend’s account that has already been taken over, which is why they work so well. Falling for one isn’t a sign you’re naive. It’s a sign the scammer used someone you trust.

Common types of Discord scams

Fake Nitro gifts

A DM says “free Nitro” or “someone gifted you Nitro,” with a link to a site that looks like Discord and asks you to log in. The site steals your login or your account token. Genuine Nitro gifts appear inside Discord as a gift embed you claim in the app, not as a link to an outside site asking for your password. Offers of “free Nitro for a year” from strangers or bots are scams.

The “accidental report” scam

Someone messages in a panic: they “accidentally reported” your account, and it’s about to be banned unless you contact a particular Discord “staff member” or “Hypesquad moderator.” That contact, who is part of the scam, then asks for your login, a code, a payment or to scan a QR code to “verify” you. Discord doesn’t work this way. Reports aren’t resolved by chatting with a staff member a stranger points you to, and Discord’s staff won’t ask for your password.

Malicious links and “try my game” files

A friend’s account asks you to test a game they made, check out a “leaked” mod or look at a photo, and sends a download or link. The file is usually malware that steals your Discord account, browser logins and sometimes crypto wallets. Once you run it, your account starts sending the same message to your friends.

QR code login tricks

Discord lets you log in on a computer by scanning a QR code with the mobile app. Scammers send QR codes disguised as a way to “verify,” claim a reward or join a server. Scanning one can log them straight into your account. Only scan a Discord login QR code that you opened yourself on your own computer. Our guide to QR code scams explains the wider pattern.

Fake Steam trades and “vote for my team” links

You’re asked to vote for someone’s esports team, accept a trade, or claim a skin, and the link goes to a fake Steam sign-in page. Other versions offer a trade, then a fake “middleman” or a fake Steam support account says the trade is on hold until you pay or share details. Our guides to Steam scams and a hacked Steam account cover this side in detail.

Fake verification bots and servers

A server asks new members to “verify” by logging in through an outside site or running a command, or an invite leads to a server built to look like an official one. Verification that happens inside Discord, such as clicking a button or reacting to a message, is normal. Verification that needs your password or a QR scan elsewhere isn’t.

Crypto, NFT and giveaway scams

Compromised server admins or bots post “surprise mints,” airdrops or giveaways that ask you to connect a crypto wallet. Connecting it can drain the wallet. See our guide to crypto scams for how wallet drainers work.

Grooming and sextortion

Discord’s private servers and DMs can be used by adults who pose as teens, build trust through games, and then ask for images or push to move to other apps. If someone is threatening to share images, don’t pay and don’t send more. It’s a crime, and help is available.

Warning signs of a Discord scam

• A friend suddenly sends a link or file with a short, unusual message, especially in a language or style that isn’t theirs.
• Urgency about your account: a ban, a report, a deadline to “verify.”
• Someone who says they’re Discord staff reaching out by DM or friend request.
• A login page after clicking a link, when you were already logged in.
• A QR code you didn’t generate yourself.
• Free Nitro, skins, Robux or crypto from strangers, bots or brand-new servers.
• A request to move the chat or to keep it secret from parents or friends.

What to do right now if you’ve been scammed on Discord

1. Stop contact. Don’t send the “staff member” anything else, and don’t pay.
2. Change your password straight away. On Discord, changing your password signs out stolen sessions and resets your login token. Then turn on two-factor authentication. If you’ve lost access, our guide to a hacked Discord account walks through recovery.
3. Secure your email. Change the password on the email linked to Discord, and check its recovery settings.
4. If you ran a file, treat the whole device as compromised. Disconnect it from the internet, run a security scan, and change passwords for email, banking and gaming accounts from a different, clean device.
5. Check money and wallets. If you paid or entered card details, call your bank on the number on your card. If you connected a crypto wallet, move any remaining funds to a new wallet and revoke permissions.
6. Warn your friends and servers. Tell them your account was compromised and not to click anything it sent.
7. Save evidence, then report and block. Screenshot usernames, user IDs, messages and links before blocking.

Where to report a Discord scam

• Discord. Report the message and the user from within the app, and use Discord’s official support site for account and safety reports. Tell server moderators too, so they can remove the account.
• Steam or the other platform involved, through its official support site, for fake trades or stolen gaming accounts.
• The FTC at ReportFraud.ftc.gov and the FBI’s IC3 at ic3.gov if you lost money or crypto.
• NCMEC’s CyberTipline if a child or teen is being groomed, sexually exploited or threatened.
• IdentityTheft.gov if personal or financial details were stolen along with the account.

Our guide on how to report a scammer explains each route and how to report outside the US.

Getting money or items back

Card payments made on a fake site can usually be disputed through your card issuer. Nitro or other purchases made from your account by someone else should be reported to Discord and, if they went through an app store, to Apple or Google as well. Whether lost in-game items or skins can be restored depends on the platform’s own policies, so report them but don’t count on it. Crypto drained from a wallet is usually gone.

Ignore anyone on Discord who offers to recover your account, items or crypto for a fee. That’s typically a second scam, as our recovery scams guide explains.

A worked example

This is an illustrative scenario, not a real case. Sam, 14, gets a DM from someone in a gaming server: “sorry, I reported your account by mistake, you’ll be banned in 12 hours unless you message this Discord admin.” The “admin” has a staff-style name and a badge in their profile picture.

1. The “admin” asks Sam to scan a QR code to prove the account is his. Sam feels uneasy and asks his older sister.
2. She explains that the QR code would log the scammer into his account, and that Discord doesn’t handle reports this way.
3. They screenshot both accounts, report them in the app, and tell the server moderators.
4. Sam changes his password and turns on two-factor authentication anyway, then tells his dad what happened.

Sam’s account stays safe because he stopped before scanning, and because he felt able to ask for help.

For parents: Discord scams and kids

Discord requires users to be at least 13 in the US, but many younger kids use it alongside games like Roblox and Minecraft. Scams and predatory contact usually come through DMs and servers full of strangers.

• Know the three rules. Never share a password or code, never scan a QR code someone sends, and never download files from people you only know online.
• Make it safe to tell you. Kids who fall for a scam, or who are being pressured for photos, often hide it out of fear of losing the app. Promise help first.
• Use Discord’s safety settings and Family Center. You can limit DMs from server members and filter unwanted messages, and Discord’s Family Center lets a parent see who their teen is adding and messaging without reading the messages. Our parental controls guide compares the options.
• Ask which servers they’re in. Small servers with friends from school carry far less risk than large public ones.
• If grooming or sextortion is involved, don’t delete the account or messages yet. Report to Discord, the FBI and NCMEC’s CyberTipline, and use NCMEC’s Take It Down to help stop images of under-18s spreading. Don’t save or forward any images yourself; report the accounts and links. Our help resources page lists support organizations.

Common mistakes to avoid

• Trusting a link because a friend sent it. Check with them somewhere else first.
• Messaging the “staff member” a stranger names.
• Only changing the Discord password after running malware. The device itself needs cleaning.
• Paying someone to “unban” or “recover” an account.
• Leaving your account’s friends and servers unwarned after it sent scam links.

How to protect yourself on Discord

• Turn on two-factor authentication and use a unique password.
• Limit DMs from server members you don’t know, and turn on message filtering.
• Open links to sign in only by typing Discord’s address or using the app.
• Don’t run files or games from people you know only online.
• Keep crypto wallets separate from your gaming life, and never connect one to a server “mint.”

If a compromised account posted scams or offensive content under your real name and it’s now affecting how people see you, our social media reputation management service can help with the cleanup. If you’d rather leave the platform once things are secure, see how to delete a Discord account.

Frequently asked questions

Is the 'I accidentally reported you' message real?

No. It’s a well-known Discord scam. Reports aren’t resolved by messaging a “staff member” someone points you to, and real Discord staff won’t ask for your password, a code, a QR scan or money. Block and report both accounts.

How can I tell a real Nitro gift from a fake one?

A real Nitro gift shows up inside Discord as a gift you claim in the app. A link that takes you to an outside site and asks you to log in is a scam, even if it looks like Discord.

I scanned a QR code someone sent me. What now?

Change your Discord password immediately, which signs out other sessions, then turn on two-factor authentication and check your email account’s security. Warn your friends in case your account sends them messages.

Can Discord get back items or money I lost in a scam?

Discord can act on accounts and may help with purchases made through it, but lost in-game items belong to the game’s own platform and depend on its policies. Card payments can often be disputed with your bank. Crypto is usually unrecoverable.