My Discord account
has been compromised

This is the most common attack vector. Scammers trick you into authorising a fake Discord application that can read your messages, join servers, or even send messages on your behalf — without needing your password. Removing these applications is critical.

1. Go to User Settings → Authorised Apps
2. Review every app listed. If you don't recognise it, or didn't intentionally add it, click Deauthorise
3. Remove all apps you are unsure about — you can always re-add legitimate ones later

After changing your password, force all other devices and locations out of your account.

1. Go to User Settings → My Account
2. Scroll down and click Log Out Of All Devices
3. This invalidates all existing tokens, kicking out anyone who had access — including via stolen session tokens

2FA adds a second layer of protection so that even if someone gets your password, they still can't log in without your phone. This is the single most effective thing you can do to prevent future compromises.

1. Download an authenticator app on your phone — Google Authenticator, or Authy are good options
2. In Discord go to User Settings → My Account → Enable Two-Factor Auth
3. Open your authenticator app, tap the + button, and scan the QR code shown by Discord
4. Enter the 6-digit code from the app to confirm setup
5. Save your backup codes — Discord will show you 10 one-time backup codes. Store these somewhere safe (a password manager, or printed and locked away). These are the only way to recover access if you lose your phone

Attackers may have changed your email or phone number to lock you out later. Verify everything is still yours.

• Go to User Settings → My Account and confirm your email address is correct
• Check that your phone number (if added) is still yours
• Review your username and display name — change it back if it was altered
• Check User Settings → Privacy & Safety — make sure settings weren't loosened
• Go to your email inbox and check for any Discord emails about changes made recently — forward suspicious ones to Discord Support

Phishing bots often use compromised accounts to spread the same scam to everyone in your contact list and shared servers. Your friends may have already received messages from "you".

• Post a message in your most active servers explaining your account was compromised
• Tell people to ignore any suspicious DMs or links they received from your account recently
• Ask server admins to check if the compromised account sent spam or performed any actions while under attacker control
• Let close friends know directly via a separate platform (iMessage, WhatsApp, etc.) since they may not see a Discord message

If you cannot regain access through the normal password reset flow (e.g. the attacker changed your email address), you will need to contact Discord's Trust & Safety team directly.

• Go to Discord's account recovery form
• Select "Hacked or compromised account" as the issue type
• Provide as much detail as possible: original email, username, approximate account creation date, billing details if you have Nitro
• Discord may ask you to verify your identity — respond promptly to their emails
• Response times are typically 24–72 hours. Be patient and check your email spam folder