Spot Discord Token Scams

Token scams try to sign in as you without needing your password. A scanned QR code, a fake login page or a program you run can hand an attacker access. Here is how to spot each one.

An error occurred. Please try again.

Discord Never Asks for This. Never scan a QR code to claim free Nitro.

US +1 213 555 9876
Unknown links
IP address stays private
Time
November 09, 2026, 15:23
Visible to
Only me
Backup size
Example: 701 MB backup
folder
Not opened
Spot Discord Token Scams | AppMsr

How Discord Token Theft Works

Your token is what keeps you signed in. Scammers steal it in a few ways: a DM with a QR code that logs them in once you scan it in the Discord app, a lookalike gift or login link that captures your details, or a 'tool' or game they ask you to download and run. Discord says its QR scanner is only for logging in, and you should never share your token or password.

Scam Message

A free Nitro QR code is a login request

A typical message reads: 'Free Nitro for active members, scan this code to claim.' Scanning it logs the sender into your account. Discord's QR scanner is only for logging in.

Fake Verification

Real servers don't need your login to verify

A server bot that sends you to an outside page to 'verify' with your Discord login or a QR code is phishing. Leave the server and report the bot.

Report Scams

Tell Discord about scam DMs and bots

Report the message or bot in the app and let Discord Trust and Safety know. If you moderate a server, warn members so the scam stops spreading.

See Warning Signs
Free Nitro DMs
Unsolicited 'free Nitro' messages from strangers, or from a friend's account that suddenly posts gift links, are a classic lure. Check that any link opens exactly discord.com, not a misspelled lookalike. Discord says it never asks you to scan a QR code to redeem Nitro.
QR Login Trick
A QR code in a DM or on a 'verification' page can be a live login request. Scanning it with Discord's scanner signs the scammer in and can bypass your password and 2FA. Only scan a code your own browser shows you.

Common Scam Types

1

Fake Bots

Scam bots copy the names of well-known bots. Check for the verified checkmark and give a bot only the permissions it actually needs.
2

Run This Program

Software sent to you unprompted, such as a game demo or a 'special access' tool, can steal your token. Discord's advice: don't download or run programs you don't recognize.
3

Friend Accounts

Scam links often come from a friend's taken-over account. Confirm with them another way before clicking anything they send.
4

Ban Threats

Messages claiming your account will be banned unless you 'verify' through a link or form are pressure tactics. Report them and check notices only inside Discord itself.

Habits That Stop Token Theft

  • Use App-Based 2FA

    An authenticator app beats SMS codes

    Two-factor authentication means a stolen password alone is not enough to change your account details. Discord recommends an authenticator app over SMS, since texts can be intercepted. Save your backup codes offline as well.

  • Check Every Link

    Make sure the address is exactly discord.com

    Lookalike domains swap or add letters to look like Discord. Before you log in anywhere, read the full address, and if a site asks you to sign in after you click a gift link, close it.

  • Limit Who Can DM

    Restrict DMs from server members

    Many token scams arrive as direct messages from strangers in large servers. Discord's safety guidance suggests limiting DMs from server members, which cuts off most unsolicited links and QR codes. Menu names may vary.

  • Keep Token Safe

    Never paste anything from DevTools for anyone

    Anyone asking you to copy code from your browser wants your token.

SEE SAFETY TIPS
Answers to Token Questions

What owners ask after a scam message

Next Step

If a scam reached you, change your password, turn on app-based 2FA, review authorized apps and warn friends who might get the same link.

Related security guides

Overview Discord Security Guide Who Reads My Discord Chats? Guide Discord Location Privacy Guide Discord Call Privacy Guide Recover Discord Account Guide Discord Hack Scams

More messenger guides: Signal Security · WhatsApp Security · Viber Security

We use cookies.
We use cookies to collect data to improve your experience on our website. Read our usage policy cookies You can your preferences at any time.