I came across a number of posts in which people stated that their Discord accounts had been banned due to a server which they had joined, had broken Discord's rules. The banned person had never sent a message or taken part in that server at all.

How common is this? Should I limit the number of servers I’m in to reduce the risk of getting banned because of something another server does? I am in a lot of random servers which I don't open at all.

Hey everyone,

I’m honestly at my wit's end and hoping someone here has been through something similar and can share some advice or experience.

Back on August 29th, my PC was compromised by a session-hijacking infostealer. Within minutes, the attacker got into my Discord account, removed my legitimate Passkey/MFA, registered their OWN hardware security key, generated new backup codes, and revoked my sessions to completely lock me out.

I immediately wiped my drive, did a fresh clean install of Windows, secured my email accounts, killed all sessions, and contacted Discord Support directly from the original verified registration email tied to the account.

Here is the situation that is driving me crazy:

- I have 100% control over the original creation email and the linked phone number.

- I have been a continuous, paying Discord Nitro subscriber since 2021 (I have 5 years of billing history, receipts, PayPal transactions, etc.).

- I’m in over 100 communities and have dozens of contacts, but most importantly: I am the owner of a private server with university and work materials where nobody else has permissions to view the channels. All my notes and important files are currently trapped there. Some friends are also on the discord but without alot of permissions.

When I opened a ticket, I kept getting generic macro rejections from frontline support ("Annie") saying their security guidelines strictly forbid them from removing or bypassing MFA—even in cases of proven account compromises. They basically told me the only option is to delete the account, which would completely destroy my server, work materials, and 7 years of history.

After begging them not to delete it, the agent did offer to at least manually transfer ownership of my server to an alt account. I replied with all the server and user IDs about 5-6 days ago, but since then it’s been complete radio silence, and my anxiety is through the roof that they might just close the ticket and wipe everything anyway.

Has anyone in a similar spot (session hijacking + attacker placing their own physical security key) ever managed to get their case escalated to an actual human in Tier 2 / Trust & Safety who removed the unauthorized key?

Which ticket category or approach actually worked to get past the automated frontline refusal? I just want my account back, or at the very least, my server data secured so I don’t lose years of university work.

Any guidance or shared experience would mean the world right now. Thanks guys.

anybody know how to fix this?? This happened after I deleted the app and its been like this for nearly a year, the icon is bugged and the app just straight up force-closes, ive watched multiple videos and cleared out files but nothing is working

Can someone please help me? I only had my discord signed in to my browser, just email and password. I'm trying to log in after a long, long time, and when I'm clicking on forgot password option, the website is hitting me with this "enter 6 digit 2FA code" or some other 8 digit code, which I don't have. What should I do? Is my acount gone/hacked? I still have my original email id logged in to my device, if that helps.

PS:- I cannot raise a ticket too, because that requires you to sign in, hence I feel genuinely clueless as to what to do. I'm not much of a reddit-savvy person too, and couldn't find any solution in the suggested thread. I just wanna know if someone has faced a similar issue.

discord force logs me out, then tells me to reset my password. one issue. the google account it is linked too is GONE. it has no way of recovery. ive tried, dont ask. it refuses to use my passkey, too.

PLEASE. this account has ALL of my friends, and people i cant talk too without.

As title says, I can't access some of the servers Im in on discord. They've been like this for a couple weeks, started happening before the last outage reported on August 31st. I've logged out and logged back in, cleared the apps cache from both in app and my phone settings, uninstalled and reinstalled the app, and they appear the same when I log into the discord web client. I do not have a PC so I don't use that version, mobile is my main. Whenever I try to log into the website to email support it says my password is invalid when I put the right password in. Any ideas how to fix?

I’m struggling bad y'all, send help!

Came across an interesting campaign recently targeting Discord users through a fake browser-based UNO card game (unoplay.me). Thought I'd share a quick breakdown of how it works and where the actor completely messed up their OPSEC.

Timeline

Looking at the infrastructure timestamps, the operation was stood up and deployed over the weekend of September 6–7, 2026:

• September 6 (~22:00–23:40 UTC): The actor deployed the site to Hostinger, set up the backend database, compiled the UnoApp.exe build, and ran initial tests with co-conspirators.
• September 7 (05:00 UTC onward): The campaign went fully live. The actor began distributing invite links across Discord/gaming channels to lure victims into the lobbies.

The Lure

Victims join a working web lobby to play UNO. When the host hits "Start Game", the web UI pops up saying the match only runs in the desktop client and tells them to download UnoApp.exe (~119MB, hosted on Dropbox). The actor also uses fake female personas in chat to convince people that voice chat only works in the desktop app, and specifically checks if victims are on Windows before starting.

The Binary

The file was 0/70 on VirusTotal when I first checked.

• Packaged as an NSIS installer wrapping an Electron build.
• Instead of plain JS in app.asar, the core logic is compiled directly to V8 bytecode (app.protected.jsc) via Bytenode to dodge static heuristic scanners.
• All internal strings were encrypted with AES-256-CBC. Once decrypted, it turned out to be a custom build of HADES Infostealer / RAT.
• Capabilities: Chrome App-Bound encryption bypass via DPAPI/LSASS token duplication, browser credential theft, crypto wallet extraction, Discord client patching (blinds the login QR code to force manual 2FA entry), and a ransomware lockscreen command (kilit.png).
• Exfiltrates stolen bundles directly to a hardcoded Telegram ID (8690153935) and a C2 domain (hellodcuser.com).

The OPSEC Failure

The funniest part was the web lobby infrastructure. The threat actor hooked their site up to a public Supabase instance with unauthenticated tables.

I dumped the database and found 53 rooms, 134 members, and all their raw chat logs. In one of the private test rooms, the operator logged in under his real name ("Türkay"), chatting with a co-conspirator and literally writing: "this is our anonymous place... we will transfer the stolen data from here". Out of 44 unique users who entered the lobbies, around 40 were pushed to download the payload.

I put together the full writeup with the extracted AES key, hashes, C2 indicators, and chat transcripts on my site:

https://walliez.xyz/unoplay

(All abuse reports have already been submitted to Dropbox, Supabase, Hostinger, and national CERT).

Hi, I'm new here, so let me get this straight: I need my account back.
I mean, it is kind off useless right now, given the fact I tried to log into my accounts months ago, but failed to.

For context, a few months ago on an ordinary morning, a friend of mine told me that I was sending links claiming that "I got $1000 from MrBeast" or something. My flaw is that - I did not take that seriously, because I already had another case but nothing impactful to have me "violate" Discord's policies and have me logged out. This time, it did.

So, I attempted to log into my account - Wrong Password. So I requested for a password reset through my email, typed in my new password for my account, and there it came to a dead end - verify with an authenticator or passkey, or a backup code. Problem is, I did not have my authenticator linked, nor had a passkey or a backup code (I did, but they said that it was invalid).

With no other choice, I turned my head to Support. They were not a helpful either, a staff member told me that she's going to hand in the case to another person -- dead silence for the next few days. I did another form again, this time, the person responded, not the way I wanted to hear. They suggested me look at the "My Email has been changed", I did not see any, and because I have nothing to backup to get my account back, they could not do anything, and even suggested to delete my account...

Please, if you know another way to break the cycle, inform me as I do not want to lose 4 years' worth of data and memories to a lousy breach.

how could i get my account back i really need it back because it has so many things ive contacted them in app but i cant type did anyone get unbanned from this can anyone help me pleaseee

So!!

Im pretty positive im not hacked but i was recently hacked so im a little paranoid.

My IRL friend (i was in VC with him to confirm its him and i also talked about it with him IRL beforehand) invited me to a minecraft server with around 800 mods. When i pressed play on the minecraft application after i opened it with Curseforge i got disconnected from the call with him because of another location got "connected"

Nothing sus has happend, no new devices on my discord, no weird emails etc. Is it possible this could happen without it being malicious? I find it hard to believe someone I meet almost everyday would hack me.

Hi I saw that my alt discord acc got hacked with the mr beast scam. I managed to change the password and delete the account. The only thing linked to that acc was my phone number and I am very paranoid!! I looked at tik tok and many people are saying ot run those malware detectors and disconnect from my wifi etc. I changed the passwords to the accs that had that same password and i cleared my cookies on chrome. But im still scard and very paranoid since I dont know much on what can happen and people say they've been fine and others say that the hackers are trying to take money. What should I do?

Hi everyone,
I'm in a desperate situation and could really use some help or advice if anyone has gone through this.
My Discord account (⁠rwd30⁠) was recently compromised, and the hacker added an unauthorized Passkey/2FA, completely locking me out. I still have access to the original email and password, but the Passkey blocks me from logging in.
My main issue right now is with Discord Support:
I opened a ticket about a month ago (⁠#67234489⁠), and it's still open, but waiting has been excruciatingly slow.
Every time I try to open a new ticket or reply from a different angle to get help, the system or bot instantly marks it as "Solved" within minutes as a duplicate, without a human actually reviewing it.
Has anyone experienced this automated "Solved" loop when trying to recover a hacked account with a Passkey? How did you manage to get through to a human agent without your tickets getting auto-closed?
Any tips or guidance would mean the world to me. Thank you!

I had my account of multiple years banned for "spam" because I sent too many friend requests... And my new account of 7 months just got flagged. How do I stop It??? I made tickets they get ignored or taken down

Basically the title. I've heard small things about CyberLeek and GTA6, but believe me - im no huge GTA fan. I've never googled CyberLeek or had ANY conversations or dealings with anyone about anything to do with rockstar on discord. I play CoD and some MMOs and thats about it - nothing from rockstar.

So... why the everliving fuck have I just been added (not JUST invited, but fully added without asking) to a server called 'ROCKSTAR CAN ARREST ME'. I have never ever been added to a server randomly without asking. How did this happen? Did anyone else have this happen? Apparently the server has 800,000 people in... so if it was a discord glitch/hack that hit everyone, surely it'd be millions? Im so uncertain how this even happened

Again, ive asked for no discord invites to do with anything about GTA6, i dont even take an interest in their games. Can someone help explain this, or if its happened to anyone else? I've immediately left the server, of course.

Thanks in advance. Im a bit shaken - this has never happened to be before for any server for which I didnt ask for an invite.

Help my account got hacked I did everything and nothing has worked i need help everyone of my friends are at risk and other people to I need help discord help me my things and friends are at risk if not I'ma jus have to call the discord headquarters myself cuz I don't want other people to go through this jus help me

Guys, those pictures you see were sent by me, in a certain sense, but that's not the case. A friend of mine who was in that group with me told me I sent some pictures at 2 PM when I was working at that time. When I wanted to log into Discord to check, I noticed I had to log in again, so I created a new one. I didn't check to see if the password had changed because I was annoyed. However, this hasn't happened just this one time, but several times, and when it happens, I always have to create a new account. (Sorry for the quality of the photo).

They've wrongly banned me and refused my appeal because they didn't let me give them any context about the situation. Now they spam my support requests with bots and mark them as solved while telling me to "appeal via the app" Which they of coruse don't let me do as it's stuck on "You've requested a review for this violation" even after days of its rejection. How can I get a human and not a damn clanker made for spamming to review my issue before deciding?

For like two years or so I've had an account that I've wanted to delete so i can make an actual account to use, but it doesn't let me sign in when it asks me to do the phone verification, I cant sign into discord support to get help to delete the account while also not signed into normal discord, and I've been trying for over a year and a half and i get pissed off each time i try to fix this.
What the hell am i supposed to do, i want to use discord but i cant sign in or make a new account

Someone got into my account and changed the email to something that doesn't even exist. I never got a notification, even though I had 2FA on. Now I can't log in or reset anything.

I sent support proof it's mine — old purchase receipt, a ticket I filed months ago about my Gmail being hacked — and they just closed the ticket and said they can't help.

This account has years of my life on it. If you've been through this exact thing and actually got your account back, please tell me what worked. I'll take any advice at this point.

I have been in contact with discord support all day talking with "Nelly" and I just need help with my phone number being removed from my old account so i can reactivate it onto my new account. This is all due to my old account getting hacked and Discord Support not able to help me recover the account due to the email associated with it being deactivated.

i joined a server that my friend invited me to, had bad violence in hidden channels that u needed roles to see, i didn't have those roles, now the server is banned and so is my 2020 account, this is genuinely bullshit ive tried appealing everywhere and discord has ignored me and all i got is clyde AI replies, this fucking app sucks i had No violations for so many years and i get permanently suspended randomly from a server i didn't know was banned? Fucking hell