Discord safety tips: how to stay safe in public servers

Public Discord servers are one of the best ways to find people who share your interests. They are also where scammers look for targets, because everyone is a stranger at first. The good news: most Discord scams follow a handful of patterns, and a few settings block the majority of them. This guide walks you through the common tricks, the settings worth changing, and what server owners can do to keep members safe.

The most common Discord scams

Scammers rely on urgency, excitement or fear. If a message makes you want to act right now, slow down.

Fake Nitro and fake giveaways

You get a message saying you won free Nitro, a game key, skins or crypto, usually with a link. The link leads to a lookalike site that asks you to log in, or to download something "to claim" the prize.

• Check the domain letter by letter. Scam domains swap or add characters to look like real ones.
• Real gifts sent through Discord appear as an embedded gift inside Discord, not as a login page.
• If a friend sends it out of nowhere, their account may be compromised. Ask them on another channel.

QR-code login scams

Someone asks you to scan a QR code to "verify", join a giveaway or get a role. Discord's login QR code lets a phone sign in a computer. If you scan a scammer's code with your logged-in Discord app, you may hand them access to your account.

• Only scan a Discord QR code that you opened yourself on your own computer.
• No legitimate server verification requires you to scan a code with your Discord app.

The "accidental report" scam

A stranger, or a hacked friend, says they "accidentally reported" you and your account will be banned unless you contact a certain "Discord staff member" or "moderator". That contact then asks for your login, a payment, or remote access to "fix" it.

Discord does not resolve reports through random users in your DMs, and Discord staff will not ask for your password. Block the person and report the messages.

Fake jobs, fake games and "test my game"

Someone asks you to try their new game, test a bot or do paid work, and sends a file or an installer. These files often steal your login token or passwords. Don't run files from strangers, even if they come from someone you have chatted with for a while.

Phishing links in general

Phishing links imitate Discord, Steam, game stores or crypto sites. Be careful with:

• Shortened links you can't read.
• Pages asking you to log in after clicking a link in chat.
• Browser extensions or "Discord themes" offered in DMs.

If you think you entered your password on a fake page, change it immediately, and turn on two-factor authentication if you haven't already.

Lock down your account

A few minutes in your settings removes most of the risk.

• Turn on two-factor authentication (2FA). It protects your account even if your password leaks.
• Use a unique password. Don't reuse the one from your email or other games.
• Check authorized apps now and then. Remove apps and bots you no longer use.

Control who can message you

Most scams arrive by direct message, so this is the single most useful change. Discord renames its settings menus from time to time, so look for the privacy, safety or "content and social" section in User Settings.

• Server DMs: you can turn off direct messages from members of a server, either as a default for new servers you join or per server in that server's privacy settings. Big public servers are a good candidate.
• Message requests: messages from people who aren't your friends can be filtered into a separate requests list instead of your inbox.
• Friend requests: limit who can send them, for example only friends of friends.
• Sensitive media filter: set Discord to blur or block explicit images from people you don't know.

You can find up-to-date instructions in the Discord Safety Center.

Choose age-appropriate servers

Discord has a minimum age (13 in most countries, higher in some). Within that, servers vary a lot. Some channels and servers are age-restricted and require you to confirm your age.

• Read a server's description and rules before you join.
• If a server's content isn't what it claimed to be, leave. You don't owe anyone an explanation.
• Parents can learn about the tools Discord offers for families in the Safety Center.

On TopGuilds, listings must follow our content guidelines, and servers marked as NSFW by Discord are not eligible to be listed.

Block, mute and report

You don't need to argue with a scammer or a harasser.

1. Block the person. They can no longer DM you.
2. Report the message in Discord: open the message's menu and choose Report. Reports go to Discord's Trust and Safety team.
3. Tell the server's moderators if it happened in or through a server. They can ban the account so it can't target other members.
4. Leave the server if the moderators don't act.

For server owners: keep your members safe

If you run a public server, your settings decide how easy it is for scammers to reach your members.

Verification level

Discord offers verification levels for servers, from none up to requiring a verified phone number. Higher levels make it harder for brand-new throwaway accounts to start posting immediately. For a public server, a medium or high level is a reasonable starting point. Combine it with a rules screen so new members accept the rules before they can talk.

AutoMod

Discord's built-in AutoMod can block messages that contain specific keywords, suspected spam, and mass mentions, and it can alert your moderators. Add common scam phrases ("free nitro", "steam gift") and links you don't want, and review the alerts regularly.

Moderation basics

• Have at least one moderator active in each time zone you serve.
• Require two-factor authentication for moderators if your server supports it.
• Limit who can post links and attachments for new members.
• Pin a short message telling members that staff will never DM them first asking for logins or payments.
• Write clear rules and apply them the same way to everyone.

Our guide on how to grow a Discord server covers moderation as part of building a healthy community.

How TopGuilds helps you find safer servers

TopGuilds is built so you can see more before you click Join:

• Every listing is reviewed by staff before it goes public, and edits to the listing text are reviewed again.
• Servers must meet basic rules: at least 10 members, a valid permanent invite, and content that follows our guidelines. NSFW-flagged servers are not listed.
• "Verified active" badge: servers that use the free BotGG bot show real activity data, so you can tell a living community from an empty one.
• Report button on every server page. If a listing breaks the rules or the server is running scams, report it and staff will review it.

Votes are also protected against abuse with account-age rules and rate limits, so rankings are harder to fake.

Conclusion

Most Discord scams fail if you slow down, check links, never scan QR codes for strangers, and keep DMs from public servers under control. When you look for new communities, start with reviewed listings: browse servers on TopGuilds, filter for "Verified active", and read our guide on how to find Discord servers that fit you. If you own a server, list it for free and keep your safety settings tight.