Account security basics
Protect your login
- Set up a passkey or security key, or use an authenticator app for multi-factor authentication.
- Use a long, unique password and store your backup codes somewhere secure.
- Review logged-in devices and authorized apps. Remove any you do not recognize.
Check links before opening them
- Only approve a QR login you started yourself in the official Discord app or website.
- Check the full destination address. If a link hides its destination, open the service directly instead.
- Never send anyone your password, authentication codes, or backup codes, even if they claim to be Discord staff.
Common scams (and how to avoid them)
scam 01
Fake Nitro gifts and giveaways
A message promises free Nitro, then asks you to sign in or scan a QR code. A fake login page can steal your password, while a QR login can authorize access to your account.
- Check the giveaway announcement through a source you already trust.
- Do not approve a login or scan a QR code to claim a prize.
- 1
A copied name or avatar
Confirm the sender through a contact method you already trust.
- 2
An unexpected prize
Check the original giveaway announcement before responding.
- 3
A hidden destination
A shortened link hides the site you are about to visit.
- 4
A QR code to claim a gift
Only approve logins you started yourself. A prize should not require a QR login.
scam 02
Someone posing as staff or a friend
A copied profile or compromised account may ask for money, login codes, or urgent help. A familiar name and avatar are not enough to verify the sender.
- Confirm an unusual request through another contact method you already know.
- Do not share login details or make a payment because someone pressures you to act quickly.
scam 03
Fake support servers and verification bots
A server or bot may pose as a support service and ask you to authorize an app, connect a wallet, or provide personal information.
- Get bot invites from the developer's official site and review the permissions before approving.
- Do not connect a wallet or sign a transaction to satisfy an unexpected verification request.
Privacy and direct messages
Limit who can reach you
- Review direct-message and friend-request permissions under User Settings → Content & Social.
- Turn off DMs from server members where you do not want private contact.
- Block unwanted contacts. Mute or leave servers that repeatedly send spam.
Review what you share
- Remove access for apps you no longer use.
- Review activity sharing and profile links that reveal personal information.
- If unwanted messages increase, restrict DMs and friend requests further.
Preparing for raids: steps for admins
Verification and new members
- Choose a verification level that fits your server. Higher levels add requirements before members can chat.
- Limit file attachments and link embeds for new members, and use slowmode in busy channels.
- Make the rules easy to find and use rules screening where available.
AutoMod and raid response
- Configure AutoMod keyword, spam, and mention filters, with alerts sent to moderators.
- During a raid, pause invites and restrict affected channels while moderators respond.
- Review alerts and audit logs, remove raiders, and report the raid to Discord.
Handling harassment
For individuals
- Use the message menu to report abuse, and block the sender to limit further contact.
- Save message links and relevant details if you can do so safely; you do not need to keep engaging.
- Tell the server moderators about harassment in their server.
For moderators
- Apply server rules consistently and record actions in a private moderation log.
- Use timeouts, kicks, or bans as appropriate, with a clear reason for each action.
- Remove abusive content and help affected members find blocking and reporting controls. Moderators cannot change another member's DM settings.
Help people find your community
When your server is ready for new members, add a Rank.top listing that explains what it offers and who it is for.