League of Legends Friend Request Scam: Why That Duo Invite Goes to Discord

You finish a match and get a friend request from somebody who says they liked how you played. You don’t remember seeing the name on either team.

A request after a good game is ordinary. What happens next tells you more than the timing does.

Overview

The first message borrows a real match

The League of Legends friend request scam begins with an apparent compliment about a game you just finished. The sender talks as if you already met.

In the reported campaign, an unfamiliar account moved the exchange to Discord and eventually offered a link to paid content. The photos used in one conversation appeared elsewhere.

That makes the personal introduction unreliable. It doesn’t tell us how every account was operated, or whether a particular person or a bot wrote a given reply.

The paid pitch and a stolen login aren’t the same outcome

A scripted chat may be trying to sell a subscription, not take over your Riot account. Other suspicious links can ask for credentials or authorization instead.

That distinction matters if you already responded. Someone who only accepted the friend request needs a different response from someone who typed a password into a linked page.

Riot, Discord and a platform named in a link can all be legitimate services. An unfamiliar account’s pitch is what you need to evaluate.

Three places where you can stop the conversation

You don’t have to keep chatting to find out what the person wants. Check whether the details that should be easy to verify actually line up:

• Look for the sender’s Riot ID in the recent game they claim to remember.
• Ask yourself whether you want to move to Discord before you know who they are.
• Ignore a subscription, login or download link you didn’t ask for.
• Keep a record of a suspicious request before blocking it if you plan to report it.

A name mismatch can have an innocent explanation. It still means the sender’s claim isn’t good enough to justify sharing account information or buying anything.

How the League of Legends Friend Request Scam Works

Step 1: The request arrives while the game is fresh

The message may land soon after a match ends, when an invitation to queue again sounds natural. A compliment gives you an easy reason to accept.

Look at the actual Riot ID rather than a similar display name. The reported requests sometimes came from accounts that didn’t match anybody in the preceding game.

A familiar champion or rank doesn’t make the story true. You can decline without investigating whether the sender guessed, read public information or simply got lucky.

Step 2: The supposed teammate asks you to switch apps

The conversation may move quickly to a Discord handle. The sender can make it sound practical: they are logging off or want to keep playing later.

Switching services isn’t suspicious by itself. The issue is making that jump for an account that still hasn’t established the connection it claimed in the first message.

It also splits the record. The original request stays with Riot while messages and links from the same person may only be visible in Discord.

Step 3: A chat that feels personal becomes a sales pitch

In the reported case, the Discord conversation built familiarity and eventually offered a subscription link. Photos made the account seem like a person you were getting to know.

Images that turn up under unrelated names aren’t good evidence of identity. They don’t tell you who is replying or who receives the payment.

Don’t buy access because it seems like the price of continuing a friendship. You don’t owe somebody a subscription for accepting a request after a match.

Step 4: The link can ask for more than you expected

A link might lead to a paid profile, but a different version can lead to a lookalike login or an unsolicited download. Don’t assume one result covers every message.

If Discord or Riot suddenly asks for a password on a page opened from the chat, leave it. Open the relevant service independently and check whether anything needs attention.

Even an official-looking authorization prompt deserves a pause. If you didn’t start an action that requires it, don’t approve it just to continue the conversation.

How to Check a Request Without Engaging the Sender

Look at the actual match record

Open your own match history and compare the Riot ID with the participants in the game. Start there rather than following a profile link in the message.

If you’re unsure which match they mean, you don’t have to ask them. Ignore the request until you recognize the account or can verify it another way.

No visible game history doesn’t prove the account is a bot. It just gives you less support for a claim that you recently played together.

A known friend can still be using a compromised account. If a longtime teammate sends an unusual purchase or login link, verify through a contact you already trust.

Keep Discord separate from the game

If you already added the person on Discord, you can stop there. A connection across two apps does not mean either company verified the person’s identity.

Use Discord’s settings to control who can send friend requests and direct messages. The controls you choose may depend on whether you need to meet new teammates.

Don’t share codes to prove you’re real or prove the account belongs to you. Codes are for completing a sign-in or security action you initiated.

If a stranger asks you to share your screen, decline. Screens can show email addresses, account details and notifications even when you aren’t trying to reveal them.

Don’t turn the conversation into a bot test

A smooth reply isn’t proof of a real person. A clumsy reply isn’t proof of a bot. You can make a safe decision without solving either question.

The better evidence is what the account says it knows and what it asks you to do. A stranger who wants a payment hasn’t earned special trust.

Avoid sending more screenshots, photos or personal information to see how the account responds. Leave the chat rather than trying to catch it in a contradiction.

What to Do if You Have Fallen Victim to This Scam

1. Stop the conversation. Don’t open another link, buy a subscription or send a login code. Save the account handle if you can do so safely.
2. Report the account where it contacted you. Include the Riot ID and match timing for Riot. For Discord, report the relevant message or profile there.
3. Secure any account whose password you entered. Open the service independently from a trusted device, change the password and review recovery settings and signed-in sessions.
4. Check your payment records. If you bought a subscription, review it through the service you actually paid. Contact the issuer for unfamiliar transactions.
5. Tell friends if your account sent messages you didn’t write. Ask them to ignore the links and check their own accounts if they entered anything.

Accepting a friend request alone doesn’t give the sender your login. If you never followed a link or shared information, blocking and reporting may be enough.

If you gave away a verification code, tell support what it was for. A code for Discord, Riot or your email affects a different account.

If you downloaded and ran something, stop using that device for account changes until you check it. Malwarebytes can help scan; AdGuard can reduce future risky ad exposure.

For account-specific instructions, use Riot’s phishing guidance. Avoid anybody in DMs who offers to recover the account for a fee.

Preserve Just Enough Evidence

Save the Riot ID, the approximate time the request arrived and which game it followed. If the names don’t match, record what the sender claimed.

On Discord, keep the profile identifier and the message that introduced the link. A screenshot of a profile photo alone won’t show the request for payment.

Don’t repost intimate images or put another person’s photos in a public warning. You can report that an account used recycled photos without circulating them further.

If a charge is involved, keep the receipt and merchant name from your actual payment record. Don’t assume the profile name is the company that billed you.

Which Account to Secure First

If you used the same password in more than one place

Start with the email account that receives password resets. Use a trusted device and make sure its recovery contacts and active sessions belong to you.

Then change the exposed password wherever else you reused it. Use a different password for Riot, Discord and the email address connecting them.

Check for changes to the email address attached to Riot. If you cannot get back in, use player support rather than asking the person in chat for help.

If you shared a code, tell support when it arrived and what the message said it was for. Don’t include the code itself in a public report.

If you approved a Discord prompt

Think back to what the prompt described. There is a difference between joining a server, granting an app access and accepting a sign-in to another session.

Review your connected apps and active sessions through Discord itself. Remove entries you don’t recognize and follow official help for the type of approval you gave.

If you see unfamiliar messages sent from your account, warn friends separately. They may trust the same link because it now appears to come from you.

Check whether notifications or account emails were changed too. A password reset may not answer every question if another setting was altered before you regained access.

If the game is on a shared computer

Tell the other people who use the computer if you ran an unfamiliar file. They should avoid signing into sensitive accounts there until the device is checked.

If you only clicked a link and closed the page, don’t assume every account needs recovery. Look at whether you downloaded anything, typed a password or approved access.

When contacting support, separate the original friend request from any later login alert. That helps the service understand which event you observed and what you did afterward.

Make It Easier to Recognize a Real Teammate

When you want to add a player, agree in the match or lobby before you leave. Check the same Riot ID when the request appears.

If you routinely play with friends, use a Discord server or group you already know. That leaves less room for a random handle to pose as the organizer.

For a team with younger players, agree that an unfamiliar adult-content link gets blocked and reported. Nobody needs to open it to find out whether the account was real.

Tell the organizer if someone is using the team’s name to approach members. A short warning in your known group can stop the same introduction from working twice.

Keep the door open for people who already replied. A teammate who feels embarrassed is more likely to ask for help if the first response is practical.

Frequently Asked Questions

Are all friend requests after a League of Legends match suspicious?

No. Plenty of players add teammates after a good game. Check whether the person actually appears in your match before trusting a claim that you played together.

If you’re not interested in another match, decline. You don’t need to accept a request just to find out whether it was legitimate.

Does the timing prove someone tracked my match?

No. The requests in the reported case often arrived after games, but the exact targeting method was not established.

Treat the timing as context, not proof that Riot exposed your account. Check the sender’s claim against information already available to you.

Does moving to Discord give them my Riot password?

No. Adding someone on Discord doesn’t by itself share credentials. The danger comes from what they ask you to open, approve or provide later.

If a page requested a Riot password, go to Riot directly and secure the account. Don’t go back to that page to see whether the login worked.

Do recycled photos prove the chat used AI?

No. They support the possibility that the persona isn’t who it claims to be. A person, scripted system or a combination can reuse the same pictures.

You don’t have to label the technology to decline a sales pitch based on an unverified identity.

What if I paid through a real subscription platform?

Check the payment and any renewal in your actual account on that service. Use its own cancellation and support tools rather than the contact’s instructions.

If you didn’t authorize a transaction or believe the seller misrepresented what you bought, explain the specific issue to the platform and payment provider.

How do I report a request if no match included that account?

Use Riot’s support route and describe the request as unsolicited rather than selecting a different player from the match.

Include the correct Riot ID and when you saw it. If the pitch moved to Discord, report the Discord messages there as well.

The Bottom Line

Decline a League friend request if you can’t verify who sent it and the conversation quickly turns into a sales pitch. Don’t follow the Discord link.

If you paid or entered a password, act on that exposure through the actual platform. Keep the message and transaction details for your report.