Discord account hacked

What this means

A taken Discord account is usually aimed at your friends. The messages offer free Nitro, a game, or a “support agent” who needs you to click. Discord says those files and links are a common way the next account gets stolen. The other use is charges: Nitro or gifts paid with a card on the account.

Discord is blunt about recovery. Their terms put account security on you, and their hacked-account article says that if you do not secure the account, Discord may be unable to help you get it back. Staff will not contact you inside the Discord app for support. Anyone in a DM who asks for payment, personal details, or a password change is not Discord.

This is separate from Social media account hacked. The email on the Discord account matters as much as the password. If you no longer control that inbox, start with Personal email account hacked.

Warning signs

• Friends say you sent them a link, a file, or a Nitro offer.
• You are logged out, or the email on the account changed.
• Discord emails you about a purchase or a verification you did not start. Discord says not to click Verify Purchase in that mail if you did not try to buy anything. That mail can mean the account is already compromised.
• An “employee” DMs you to appeal a ban or to fix the hack, and wants a code or a card number.

Recover now

First 15 minutes

1. If your email changed, open the warning Discord sent to the old address. The button says Start Account Recovery. Discord says the link is valid for 48 hours, and the URL must start with https://discord.com/wasntme/. Anything else is not their recovery page. The link is only for you. Do not forward it.
2. Finish that revert. Discord says it puts the email back, logs the account out everywhere, requires a new password, removes the phone number, and removes multi-factor methods. It also invalidates newer recovery links. You will need to turn multi-factor back on afterwards. That is the point. The other person’s codes are gone.
3. If there is no email to revert, reset the password from Discord’s own site and turn on multi-factor authentication. Discord lists that as the first step when you suspect a compromise.
4. Remove apps you did not authorise.

5. Tell friends not to open what “you” sent. Do it from another app. Discord says suspicious links often pretend to be games or free Nitro.

Today

1. If you still cannot get in, or charges went through, file Discord’s hacked-account ticket at dis.gd/hackedaccount. If the email was changed, their unrecognized-charge article says to choose Hacked Account, give the original username, the original email, and the user ID if you know it, and answer yes when asked whether the email changed. Include the date, amount, and payment method of any charge. They ask for one ticket per issue. Extra tickets slow the queue.
2. Discord says they aim to answer some payment requests within 72 hours, and that some cases take longer. That is their target, not a promise that the account comes back.
3. On Windows, Discord recommends a Windows Defender scan. A “Nitro” download is malware often enough that the password reset should happen from a different device if you clicked one.
4. Check the card that paid Discord, on the number printed on the card, if you see charges you did not make. That dispute is with the card issuer as well as Discord. See Scammed or fraudulent bank charge.
5. Turn multi-factor authentication back on after a revert, because the revert removes it. Use an authenticator app, not a code sitting in an email the other person can read.

Verify recovery

• You can sign in with the new password, and multi-factor authentication asks for a code you can produce.
• The email on the account is yours, and Authorized Apps is empty of names you do not know.
• A friend confirms the scam messages have stopped.
• The card shows no new Discord charges after the reset, or those charges are in a ticket with Discord and the issuer.

After recovery

Leave any server that was only there as part of the scam. Do not “appeal” anything through a DM. Discord’s article says staff do not do support that way. If a purchase email was real, deal with it from the ticket, not from a button a stranger highlights.

Prepare now

Access

• Multi-factor authentication is on, and the backup codes are stored outside Discord and outside your email inbox.
• The password is unique. The email on the account has its own second factor.
• You have not authorised a bot or an app you do not use. The list is short enough to read.

Habits

• You do not open “free Nitro” links, including from friends. Discord names that lure on the hacked-account page.
• Purchase emails get checked inside the app, not through a button, when you do not remember buying anything.

Practice

• You have opened Authorized Apps once and you know what a normal list looks like for you.
• You know your Discord user ID, or where to copy it, so a hacked-account ticket does not stall on that field.

Common mistakes

• Clicking Verify Purchase, or a DM from “Discord support.” Discord says staff will not contact you in the app, and that a purchase verification you did not start is a warning, not a button to press.
• Using a recovery link that does not start with discord.com/wasntme. Discord says other URLs are fake. The real link also dies after 48 hours.
• Stopping after a password change. Authorised apps and a changed email both outlive the old password. The email revert exists because of that.
• Filing five tickets. Discord says one ticket per issue. Duplicates delay the reply.
• Opening the Nitro file on the same PC you then use to reset the password. If that file was the malware, type the new password somewhere else.

Sources

• Discord: My account was hacked or compromised
• Discord: My email was changed and I want to undo it
• Discord: Unrecognized charge, including a changed email
• Discord: Authorize payments, if you did not make the purchase