The "I accidentally reported you" Discord scam, explained for admins

How it starts

A member gets a DM from someone on their friend list, or from someone they share a server with:

hey sorry, I think I accidentally reported your account, my little brother was on my PC. Discord says they'll ban you in 24 hours unless you talk to their support. Add this guy, he's staff and he fixed it for me.

The sender is often a real friend whose account was taken over a few days earlier. That is what makes it work. The member trusts the name, the story sounds plausible, and there is a deadline.

The fake staff member

The account they are told to add has a name like "Discord Support", "Trust & Safety", or a mod-sounding handle, with the Discord logo as its avatar. It is polite and patient. It starts with harmless questions: username, age, which servers you are in. Then it asks for the thing it actually wants:

• the code from an email or authenticator app, "to verify you own the account"
• a QR code scan in the Discord app, "to link your account to the review"
• a login on a page that looks like Discord's
• sometimes a "refundable" payment or a photo of an ID

Any one of those hands over the account. Within minutes it is messaging the member's friends with the same story, and posting scam images in the member's servers.

The one fact that ends it

Discord never handles reports through a user you were told to add. Real Discord notices come as system messages marked official, or by email from Discord itself. No staff member DMs you a deadline, asks for a code, or asks you to scan a QR code. If someone says they are Discord staff in a DM, they are not.

A report made by mistake also does nothing on its own. Reports are reviewed, and an account is not banned because a friend clicked the wrong button.

Why it is a server admin's problem

The scam happens in DMs, which no moderation bot can see, Frostbite included. But it spreads through servers:

• When the first DM comes from a stranger, a shared server is how they reached the member.
• Every member who falls for it becomes a new compromised account inside your server, ready to post scam images or message other members.

So the server is where you can cut it off.

What to do

1. Post one clear warning. Pin it in your rules or announcements channel: Discord staff will never DM you. If someone says they reported you by mistake, it is a scam. Block them and tell a mod.
2. Make your real staff easy to recognise. A visible mod role, and a rule that mods never ask for codes, logins, or QR scans. Members who know what a real mod looks like spot a fake one.
3. Show members the DM setting. Each member can turn off DMs from a server's members in that server's Privacy Settings. Members of large public servers get far fewer scam DMs with it off.
4. When a member reports it, act on the sender too. The friend who "accidentally reported" them is probably compromised. Time them out and point them to the steps that recover a hacked account.

Where Frostbite helps

Frostbite cannot read DMs. What it catches is what happens next, in your server:

• The compromised account's first post. Scam images get removed on sight, including edited reposts, using a shared blocklist of over 24,000 fingerprints.
• The wave. With cross-channel detection on, one account spraying the same image into several channels is removed everywhere at once and logged as one alert.
• The recovery. The member whose account was taken gets a direct message with the steps to get it back, instead of a silent ban.

Setup is /filter quicksetup, and every option is on the commands page. For the image side of these takeovers, see crypto casino scam images.