How to stop fake Discord Nitro scams

What the Nitro scam looks like

Someone posts a message that says a friend gifted them Nitro, or that Discord is giving away Nitro for a partnership, or that an event is handing out free codes. There is a link, sometimes a screenshot, and a sense that the offer expires soon. The link goes to a page that copies Discord's login screen, or triggers a QR code login, or asks the member to run a "verification" script.

The details change every few weeks. The shape does not:

• A trusted-looking sender. Often a real member whose own account was just hacked.
• A reward that costs nothing to claim.
• A link off Discord, on a domain that looks close to discord.gift or discord.com but is not.
• Urgency. "Ends tonight", "first 50 people", "claim before it expires".

Once a member logs in on the fake page, the attacker has their token. Within minutes that account posts the same scam in every server it is in, and the wave spreads.

Why members keep falling for it

Nitro gifts are a real feature. Discord really does show a gift embed, and friends really do send them. Scammers copy that exact embed as a screenshot, then attach their link. To a member scrolling on their phone, a real gift and a fake one look identical.

Telling people "never click Nitro links" does not work, because sometimes those links are real. The filter has to catch the fake ones.

What a server admin can do by hand

Three settings help before any bot is involved:

1. Discord AutoMod, block known spam links. Server Settings, AutoMod, enable the built-in spam and mention rules. It catches some domains, but scammers register new ones daily.
2. Slow mode in busy channels. It does not stop the scam, but it limits how many channels a hacked account can hit per minute.
3. Require 2FA for moderators. Server Settings, Safety Setup. A hacked mod account is far worse than a hacked member account.

These are worth doing and none of them catch a screenshot of a gift embed with the link written in the image.

Removing it automatically

Frostbite handles the parts AutoMod cannot:

• Scam images. The fake gift screenshot gets fingerprinted. Once one server has blocked it, every server running Frostbite blocks it, including resized, recompressed, or cropped copies. The shared blocklist holds over 16,000 fingerprints, and every new detection adds to it.
• Text inside images. If a screenshot is new, Frostbite reads the text written in it and matches it against known scam phrases. "Claim your Nitro", "first 50 people", and the usual variants are caught even when nobody has flagged that exact image.
• The hacked-account wave. The same image hitting several channels, or several servers, within seconds is the signature of a compromised account. Frostbite deletes every copy at once and logs one alert, not forty.
• The victim. The member who got hacked receives a direct message with the six steps to recover their account. A kick can carry a one-time invite back.

Setup is two commands:

/filter quicksetup log_channel:#mod-log
/filter status

The second one shows what is on and whether Frostbite has the permissions it needs. Full details are on the commands page.

Teach members the tell

The one habit worth spreading: a real Nitro gift never asks you to log in. Discord already knows who you are. Any Nitro link that lands on a login page, a QR code, or a download is a scam, no matter who sent it.

Pin that sentence in your rules channel. It is the single most useful line of scam education on Discord.