A scammer can imitate a moderator's name or avatar and send a private chat demanding a password, payment or off-site form. A real moderator may contact users about community rules, but the displayed identity alone is weak evidence. Reddit's impersonation policy treats a combination of profile elements and behavior as relevant; look at the actual account and how the message arrived before responding.
Before you start
Pause if the message says you must act in minutes. Do not share passwords, backup codes or login links. If it concerns a subreddit action, visit that community directly rather than entering through the message's external URL. Keep the original message so you can report it if necessary.Do it step by step
- Read the exact username, not only the display name or avatar. Open the sender's profile and compare it with the moderator list of the community named in the message. A similar spelling or new account should prompt further verification.
- Check whether the message came through the community's official mod mail or an ordinary chat request. A personal chat from an alleged moderator is not automatically fraudulent, but it does not carry the same context as mod mail.
- Go to the subreddit by typing its known name or using a saved link. Read its rules and pinned posts for any matching announcement. If the message cites an account suspension or site-wide problem, verify through Reddit's own notifications and Help pages.
- If a legitimate action is needed, carry it out inside Reddit through its normal controls. Never send a one-time login code or pay a 'verification' fee. Moderation of a community does not require your account password.
- If identity is still uncertain, contact the moderation team through the subreddit's mod mail with a brief description, without forwarding secrets. Wait for a response before uploading documents or following an external process.
- Report a clearly impersonating account or abusive chat using Reddit's report controls, then block it if needed. Preserve screenshots and URLs if the attempt involved payment, threats or personal information.