untrappable

Discord scams: fake admins, free Nitro, stolen tokens

Editorially reviewed · Last updated July 24, 2026

Yes — this is a scam. A stranger claiming you did something you never did — and rushing you to an “admin,” a link, or a login page — is a script for stealing your account.

Text Message · Today 9:41 PM
from maddie_0413
hey!! i accidentally reported your account instead of a scammer's, im so sorry 😭 discord is going to delete your account in 24 hrs unless you contact the admin who handled it. message him here before it's too late: dlscord-appeals.net
The Text message, as received

Other versions you might get: A bot DM offering free Nitro, a “Discord staff” member who needs to verify your account, a friend (already hacked) sending a game or a “check out this app,” a too-good trade on a look-alike marketplace, or someone asking you to scan a QR code to “help them log in.” Different costumes, one target: control of your account.

What to do right now

  1. Don't click, don't download, don't scan. Unfamiliar links, unprompted files, and strangers' QR codes are the three main doors into your account — Discord recommends checking any suspicious link against a scanner like VirusTotal before touching it.
  2. Never share your password or authorization token — with anyone. Discord will never ask for either. A “Discord admin” or “staff member” who does is an impersonator; it's also how server moderators get turned into stepping stones against their own communities.
  3. Turn on 2FA now. With two-factor authentication enabled, a scammer who gets your password still can't quietly change it and lock you out.
  4. Tighten who can DM you. In User Settings → Privacy & Safety, turn off “Allow direct messages from server members” for servers you don't fully trust — most scam DMs come from strangers hiding in big servers.
  5. If your account is compromised, reset your password immediately (that also invalidates your old token) and report it to Discord to help regain ownership. If you lost money, also file at reportfraud.ftc.gov and ic3.gov.

How to make sure it never bites you

Your account is valuable even if you think it isn't — to a scammer it's a trusted voice in every server you're in. Lock it down once and the whole category of DM bait goes quiet — see how to protect your accounts.

Untrappable · Public service advisory

Stop the next one at the source

You got this because your details are on lists that get bought, sold, and leaked. You can't unspill that, but you can make it useless to a scammer. Start with the free steps — they do most of the work.

Optional — if you'd rather it was handled for you

If you'd rather have it watched for you, an identity-protection service monitors your accounts, SSN, and the dark web, warns you the moment something new appears, and helps you recover if someone gets through.

See identity protection →

Affiliate link — we may earn a commission at no extra cost to you. It never changes our verdicts. Why we can still be trusted.

Keep this · forward it to someone who needs it

Frequently asked

Someone said they accidentally reported my account and I need to contact a Discord admin — is it real?
No. This is an account-theft script, and it matches the pressure pattern Discord's own safety guidance describes: a stranger claims you did things you know you never did, then rushes you to act before a fake deadline. Real moderation doesn't work through a random user's apology DM, and the “admin” you're sent to is the scammer's partner — the endpoint is always your password, token, or a look-alike login page. Scam reports describe exactly this wording circulating in DMs. Close the chat, report it to Discord, and don't contact the “admin.”
Is that free Discord Nitro message real?
Treat it as a scam. Discord is unambiguous about gift bots: it doesn't create bots to offer you free products — if a bot DMs you an offer or a link, that's a scam, and Discord asks you to report it. The same goes for “free Nitro” links from strangers or from friends whose accounts may already be compromised: the link leads to a fake login page or a malicious download, not a gift. If you want Nitro, get it inside the app — never through a DM link.
What can a scammer actually do with my Discord account?
Everything you can. Discord's safety team spells it out: a hijacked account can have its username, password, and linked email changed; the intruder can read your private messages and personal info; and if you own or moderate servers, they can change permissions, add malicious bots or webhooks, kick members, or impersonate you to trick people who trust you. Accounts with rare badges are targeted specifically. That's why 2FA matters — with it on, changing your password requires a code the scammer doesn't have.
How do I stop getting scam DMs on Discord?
Cut off the main route: strangers in shared servers. In User Settings → Privacy & Safety, under “Server Privacy Defaults,” turn off “Allow direct messages from server members” — new servers you join won't be able to DM you unless you're friends. You can re-enable it per server for communities you trust. Beyond that: don't click unfamiliar links, don't accept files from people you don't know, and report scam DMs to Discord so the accounts behind them get actioned.
How do I report a scam on Discord?
Report it inside Discord first — the report form covers compromised accounts, scam DMs, and malicious bots, and it's also the path to regaining a stolen account. If the scam cost you money — a fake marketplace, a crypto pitch, a bought “rare item” that never arrived — also file with the FTC at reportfraud.ftc.gov and the FBI at ic3.gov with screenshots and any payment records.

Related scams

Sources

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.