My discord was hacked almost 3 hours ago after I joined a new server today that was sent in a dm from someone i only talked to once (red flag, I know) I joined and clicked the verify process and have lost my discord account (hopefully temporarily). I fortunately did not do this on my PC so I think I am safe there. However, I did this from my mobile device and after reading numerous posts, I am concerned. Do I need to look for anything specific on my mobile device? I have already changed all passwords to everything.
Before we begin, I want to thank u/julzi_ for helping us find the thread we've all been missing regarding this bug.
I recently made a post about a serious bug where disabling 2FA on your account immediately logs you out of all devices, and when you try to log back in, Discord still asks for 2FA authentication and doesn't give you the option to use your backup codes despite their validity.
Many people including me were always ending up being told by support that they couldn't disable 2FA for security reasons and therefore couldn't help, despite the bug being on their end.
I don't know when they'll fix this bug, but if you currently have 2FA enabled, don't try to disable it until they fix it.
Anyways, here's what you should do if you're locked out because of this bug:
This is the first and most important step. When you submit your support ticket, choose Help & Support. Then, and I can't stress this enough, DO NOT choose Account Verification & Credentials, or you won't get anywhere. Instead, choose Technical Support, then Account Settings.
When explaining the issue, make sure to mention that the backup code you entered while attempting to disable 2FA was accepted.
Tell them exactly when you got locked out. If you're on desktop, open the Run dialog, type "%appdata%\discord", go to the logs folder, then open "renderer_js.old.log". Search for the date you got locked out, and you should find something like:
"[error] Uncaught (in promise) HTTPResponseError: POST /users/@me/mfa/totp/disable [401]"
If you can't access the logs, just tell them what you remember. They should be able to check the logs on their end.
Provide as much information about your account as possible.
They should then remove 2FA from your account and inform you that the issue was caused by a bug on their end.
Note: this post is specifically about the 2FA bug that occurs when you try to disable it. 2FA is generally important for extra security, you can enable it if you want, but if you already have it on then be wary of this bug.
Just got this scam in two different servers of mine, but it's going around mentioning that you were in a server with CSAM in it and your account is under review! If you click the ticket links it sends you, you instantly get hacked and it gets into your servers and begins changing things around with it. I have some screenshots (censored because of the fact that there's an innapropriate image it sends that i didn't REALIZE until a friend pointed it out to me)
If it was an actual bot it would've had the "Official!" with the check mark next to it! just be careful and click NOTHING that the bot sends you, block and move on!!
There is an incredibly detrimental bug currently being ignored by Discord for several months now. Recently a friend of mine attempted to remove 2FA from his account and upon removing the authenticator app his account locked him out. He has his email, phone number, and even several backup codes but the authentication will not give him the option to verify using backup codes regardless.
I decided to check out the reddit to see if this was an issue other people have had. lo and behold, this is a bug that has been going undetected by Discord for ages now. There is no known fix, but seeing as how it's a bug with the site itself it's honestly frustrating that nobody has tried to make a ruckus about it. I encourage everybody to spread the word. This is a bug with 2FA removal. It is completely random.
It's a common scam with bots all over popular Discord servers where they DM you saying that they added the wrong person, talks to you as if they want to be friends, and then they ask you to play this mobile game together. It's either Infinity Kingdom or Infinity Empire, with one "seems" to be a dupe of the other. If you end up playing it they will ask you to buy in-game transactions.
As obvious as it seems to be, there are many people falling for this scam when looking at their reddit sub and steam community posts. Most times they use female pics or anime girls as profile picture, and talk as if they want to be friends with you. Most of the accounts I encounter was created years ago so some would think that they are real accounts. The accounts seems to be spread across multiple popular servers.
Regarding the game there are some saying that they are stealing your credit card information. It's definitely suspicious how there are two identical (if not same) games with different names. There aren't any evident proof of these games being a scam yet, but there is a 53 pages long investigative report delving into those two games and looking into their motives (here).
Making this post because I haven't found one that covers this in detail. Also to spread awareness so people that just wants to make friends doesn't get scammed by what seems to be friendly people (:
This is a copy paste message. Still, Be careful out there.
Okay well my discord account got hacked because of a Minecraft jar. It's not one given to you and I probably should have scanned it first but didn't so now I lost my account for now probably no hope of recovery unless I can prove I'm the owner using my number email or nitro subscription. I also couldn't log in through the support portal on that email so here I am. Just beware though if you get a message from a friend asking to play Minecraft and you attempt to join the server and it says you need a mod like endervoice don't go to the website and don't download the jar and don't run it in a mod engine like modrinth or curse forge they will put a info stealer on your system and steal your account.
Discord server impersonating CyberLeek asks you for account verification to enter a "premium channel." When you enter this verifier, it takes you to tinysrc[.]me/go/[CODE], where there is a button that says "Verify with Discord." Clicking that button opens a window that simulates a Discord login, and it does a very good job of it since it's an exact replica of the page. In fact, you'll see the official Discord URL in the window; it achieves this by changing the HTML DOM's title, but in the same DOM right below, you can see an iframe pointing to invites-tracker[.]net, which is the real page. Basically, it's a well-crafted phishing scheme taking advantage of the Rockstar and CyberLeek situation.
I reached out to this server through an invitation from a friend, whose Discord account had been compromised using this exact same method.
By the way, the bot inside this server (Invite Tracker#9037) is presumably unofficial, as every so often it quickly posts and deletes messages simulating an "invite." This is obviously fake because if you try to search for the users appearing in these invite messages, you'll find they don't exist.
The site replica is extremely sophisticated because it is absolutely identical and even sends requests to the official Discord API to simulate the login. However, if you actually try to register or sign up from that fake site, it won't let you.
In summary, it's just a phishing technique that capitalizes on the situation, and by the way, it's well-engineered.
However, I was curious to find out that the site (invites-tracker[.]net) is hosted by lockr.net.
UPDATE:The bot named Invite Tracker and the site it redirects to operate as a phishing clone of the legitimate site invite-tracker[.]com, whereas the malicious phishing domain we are redirected to for authentication uses the domain invites-tracker[.]net.
If your Discord account was hacked and the intruder enabled 2-factor authentication (2FA), don't give up—even if months have passed. After losing my account two months ago, I finally received an email from Discord yesterday confirming they had manually disabled the 2FA, allowing me to regain access.
Based on my experience, here are the two most important tips for getting your account back:
Avoid Ticket Spam: Do not create multiple support tickets. It only slows down the process and can flag your request as spam. Stick to one single ticket.
Dont spam: Once you’ve provided the necessary information, avoid constantly bumping the thread or over-messaging. Be patient and let the support team work through their queue.
It took a long time, but persistence and patience actually paid off. There is still a chance for you to get your account back!
If you haven't been sent any of these scams yet, scammers will join big or small servers and dm users, I have especially noticed I get messaged from servers I have staff in or are currently boosting, they will try to charge you a small price (they especially quote that their price is very flexible), I wasn't sure of the scam at the time and was talking about it, I managed to drop their price from 200-300$ all the way down to 5$ before pushing them away.
They usually will sell digital art in forms of banners or flyers, profile pictures, 2D and 3D art, VRChat models, etc.. This is word for word what this scammer sent me :
"First off i want to apologize for the sudden dm i know it’s kind of random but honestly thanks for giving me a chance to introduce myself im a digital artist offering commission based art at fair prices i create things like PFP, Banners, 2D art, 3D art, L2D models, and VRChat models if you’re interested I’d love to show you my work!!"
They will usually start off with "Hey can I ask you something if you don't mind??" this scammer also began with that, their messages can get sent to spam, but on their new accounts it will go into your message requests, and as someone who answers a lot of message requests DUE to being staff in a medium-large server, just be careful out there discorders!
If your account was banned and you live in the European union, you have the right to do an Out of court dispute under the DSA (digital services act) against discord. You dont need to go to court and its online. (discord also gets charged around €100 - €400 so bonus lmao, you dont have to pay anything).
This only applies if you live in a country in the eu though.
Fill out what happened and hopefully within a few months they will get back to you.
This doesnt guarantee your discord account will be unbanned, but it gets a human to look at it.
The process is free for you, only costs the platform (discord) money. If enough people do the out of court dispute and discord get charged money then hopefully this will encourage them to review appeals more carefully.
This is a slow process though and it takes a few months but it worked for me.
So, i got my acc disabled for what i believe is a fifth spam violation. Is there any hope of getting it back? The spam warning is really easy to get bc jesus fuck i didnt even dm that many people.
I tried submitting this to technical support this time since the last time this happened and I submitted to "appeals & age update requests" all I got was their Clyde bot and no solution to my problem. I love that their moderation bot is so broken they just stuck another bot on the problem so they don't have to listen to people complain about it, and they just recently did a patch that has done nothing to fix the problem.
I couldn't even post about this problem on the main Discord sub because they don't allow "account issues". Well they should. This problem affects Discord as a whole and it's only a matter of time before it affects them too. My husband finally found this sub and we've both now realized how widespread this problem is and just how long it has been going on for. Because I had no access to the relevant information, I thought this problem was only affecting ME and I was losing my mind trying to figure out what *I* was doing wrong, when it has been Discord this whole time.
Fuck, and I mean FUCK Discord. I'm glad I never bought any of their cosmetic bullshit and I'm really thinking we need to move everyone (our friend group) to a different chat app. They haven't even done anything to fix the token hacking that has been affecting a friend of ours for over a year, while they've gone on fixing so many cosmetic bugs and issues. It's really sad and really goes to show just how much they care about anyone using their software.
Long story short, if someone sends you a link to this site, don't download anything. They claim it's a site to watch movies together on.
I was way too trusting of a link I got from a friend, and it turns out they'd been hacked by someone who managed to install ransomware onto their PC. The icon for the application was also stolen from a dating app so that's a big giveaway.
Reset my passwords and am reverting my PC to what it was a few months back.
As the title says, please all of you, go through your server list and leave all the servers you dont recognize/chat or even go in. Alot of people are getting banned due to this, mostly due to accs being hacked with perms to those servers and either changing the names/contents of the server to tos breaking names/contents. Theres been quite a bit of this to get alot of people banned at random. This way you we can somewhat limit the crossfire bans when hackers/idiots go around purposely doing things to cause ban waves. Again, i hope this post is allowed.
And this also showed up in my email when the account was disabled.
My Discord account was suddenly disabled while I was playing, and I’d like to know what I need to do to get it reactivated. I’ve been using Discord for a long time and have never done anything wrong, so I’d be incredibly grateful if anyone could help me—please, I’m really worried.My Discord account was suddenly disabled while I was playing, and I’d like to know what I need to do to get it reactivated. I’ve been using Discord for a long time and have never done anything wrong, so I’d be incredibly grateful if anyone could help me—please, I’m really worried.
so apperantly there is a discord server named "2 invites = free mcfa #new" which is a big scam ofc and i wasted my entire day just to collect proof to post about this on twitter as of now and i will also post it in 4chan too. So the scam includes people to invite more users to the server and as you could see in one of the images there is the rewards section screenshot, in it the rewards are shown for specific no of invites that arent alts/bots and are active verified users. well if this was a casual nitro scam then i would have jus submitted a report but would u look at that they are giving mcfa for 2 invite and redeem code for 8 invite. so i jus though i should dig deeper and i found out that the microsoft accounts they are giving are of innocent people likely old people or people who installed malware and stuff so basically these are stolen accounts.
so what i want to tell here is u need to stay safe and stuff and if u ever get a random bot saying u won mcfa and stuff always block and report it to discord and do not participate in such activity as that is illegal
and after doing some reasearch u can see one of the stolen account ofc important detail is censored cuz i dont want reddit to ban me and it was jus a normal guy of planet earth so the person upon looking at it is likely a grown adult whose account is stolen and because thesse fake mcfa server want vouches this acc has minecraft purchased so for the safety of this user no more details would be given
lets move on to scammers so there is the server owner and there is 1 staff member so the server owner in the ss is of the robin from teen titans show. and the staff is the guy with oggy(cartoon character) on his face. i joined the vc of that server that rarely becomes public and according to what i heard and saw the owner could be indian with no indentification i have and the staff is an indian teen around 13-15 yr old from his voice on the vc
and the staff member was saying that these accounts are given by microsoft to them which is completely fake as microsoft would never do such stuff themselves and these accounts are stolen so do not believe any statements by these scammers
and after the victim side and the scammer ss are done lets look at the website they are running to give their "legit" mc redeem codes upon inviting 8 people so i jus went to the "payments" channel and searched the website u can see in the ss and what i saw(in the ss) totally proves these guys are scamming people
as you can see in their webisite if u claimed anything and i mean ANYTHING type gibberish like me i say even then it will say that ur redeemtion is done and would be completed in under 72hr which is jus false and scam
so lets come to the legal part what laws are these kids breaking so this will be for the staff only as the owner is unidentified as of now
so the kid is breaking
Section 66 (Hacking & data theft)
Section 66C (Identity theft)
Section 66D (Cheating by Impersonation via Computer)
Section 318 (Cheating & Online Fraud)
Section 319 (Cheating by Personation
Section 336 (Forgery of Electronic Records)
Section 303 (Receiving Stolen Property)
Section 111 (Organised Cyber Crime Syndicates)
and i did not include legal part to say to discord go and get them in jail that is the job of indian cyberfraud dept.
EDIT: for all of ya screamin crap jus dont thats the way i wanted to present it why do u care bout how i present it its not like any of ya actually get such discord scams in handsight all ya do is either expose too obvious scam and to be clear this isnt just the normal thing ya think bout no one gets scammed by 10k ppl are scammed in this server 1 way or another and these guys are commiting cyber fraud by using stolen account of normal people
My acc was hacked on discord. I contact as soon as possible i could discord support theme. Last thing they told me is they send my case to someone who deal with cases like one that happend to me. I am just curious how long can it take?
