Spot the request behind the scam.

Check the action being requested

Pause when a message asks for access, a secret, a scan or a download.

Discord’s safety guidance warns against unfamiliar downloads, unknown code, suspicious links and unverified QR codes. Never share your password or authorization token. Treat an unexpected “test my game” download or urgent login request as something to verify independently.

Our practical advice: open the app or the official site yourself. A familiar avatar, a copied name or a message forwarded by a friend should not decide whether you enter credentials.

Source: Protecting Against Scams

Know how real support works

Discord says staff will not DM you in the app to handle support. Do not pay someone, provide personal information or change your login details because a DM claims your account needs an appeal.

If you suspect compromise, use Discord’s official support process. Its guidance includes resetting your password, enabling MFA and reviewing Authorized Apps to remove unwanted access. Give support an accurate account of what happened.

Source: My Account was Hacked or Compromised

Protect the login before you need recovery

Discord supports passkeys/security keys, authenticator apps and SMS MFA. It recommends security keys; passkeys offer phishing-resistant sign-in. Authenticator codes still need to be kept secret.

Save your backup codes privately after enabling MFA. Each is single-use, and Discord Support cannot simply remove MFA for you. Keep a recovery plan you can use without depending on a stranger in a DM.

Source: Setting up Multi-Factor Authentication