A compromised Discord account may message friends, post malicious links in servers or spend through stored payment details. Do not debate an alleged Discord employee in a DM: Discord says its staff do not contact users inside the app for support-related issues. Work from the app or official support site you open yourself.
Recover and audit
- Check the inbox for a Discord Email Address changed notice. Discord says its email-change message may include a temporary route to undo the change. Navigate carefully and never forward the message or its codes to anyone.
- If you can still sign in, reset the password and enable MFA. If you cannot, use Discord's official compromised-account support flow. Include the original account details and any unauthorized transactions in the request.
- In User Settings → Authorized Apps, remove apps you do not trust. Review the email and phone attached to the account and inspect recent messages, server actions, subscriptions and billing.
- Warn friends and moderators by another channel that recent messages may be unsafe. Ask them to avoid downloads and payment requests from the compromised account until you confirm control.