1.

What the user sees

The lure as presented

  • A fake support account, or someone claiming they reported you by mistake, contacts you.
  • They create urgency around account suspension or investigation.
  • They may ask for an email change, QR scan, or file download.
2.

What happens behind the scenes

What the attacker is trying to obtain

1False report DM
2Fake support
3Email change or QR
4Recovery loss
  • Changing the account email to the attacker's address gives them control over recovery and password reset.
  • QR or file lures can add session hijacking or malware infection to the attack.
1.

If you fell for it

What to do first

  1. 1
    Contact official Discord Support immediately and request account email recovery.
  2. 2
    If a QR code was scanned, change the password and log out all sessions.
  3. 3
    If a file was run, treat the device as compromised and secure accounts from another device.
2.

How to avoid it

Where to stop before damage

  • Discord staff do not resolve account issues through ordinary DMs.
  • Do not change your email because a support impersonator tells you to.
  • Open support requests yourself through official Discord Help channels.