What to Do When Your Discord Account Gets Hacked

Discord, the popular chat and communication platform, has over 150 million monthly active users according to a company blog post. Unfortunately, that large user base makes Discord a prime target for hackers and scammers. Compromised Discord accounts can be used to spread malware, steal personal information, spam servers, and commit fraud.

According to a 2021 report from Sophos, Discord is becoming increasingly popular among cybercriminals for sharing hacking tools, stolen data, and coordinating attacks. Researchers also found over 17,000 malware URLs in Discord in just a two month period.

If you suspect your Discord account has been hacked, it‘s crucial to act quickly and methodically to minimize damage and secure your account. As a cyber security expert with over a decade of experience, I‘ve unfortunately seen my fair share of hacked Discord accounts. In this guide, I‘ll walk you through the steps to recover your account, investigate the extent of the breach, and implement strong security controls to prevent future attacks.

Signs of a Hacked Discord Account

How do you know your Discord account has been compromised? Here are some red flags I advise watching for:

• Unrecognized logins from unknown devices or locations (check Discord‘s Login History in User Settings)
• Messages sent from your account that you didn‘t write, often containing suspicious links or files
• Friends reporting receiving spam or strange messages from you
• Your Discord username, avatar, email or password was changed without your consent
• Unexplained changes to your friends list, server memberships, roles or permissions
• Fraudulent purchases or charges if you had a payment method linked to your Discord account

Step-by-Step Account Recovery

If you notice signs your account was hacked, follow these steps to regain control:

1. Reset your password: Immediately change your Discord password to a strong, unique one not used anywhere else. This locks out the hacker.

2. Check authorized apps/connections: In User Settings > Authorized Apps, remove access for any unknown third-party apps or games. The hacker may have granted permissions.

3. Enable Two-Factor Authentication (2FA): In User Settings > Security, enable 2FA and follow the steps to set it up using an authenticator app or security key. This adds a second layer of protection to your login.

4. Review server permissions: Check what servers you have permissions in and if any roles were altered. Remove unknown members the hacker may have invited.

5. Delete suspicious messages: Scan your DMs and server message history for suspicious content posted by the compromised account and delete it. Let friends know you were hacked and to avoid links you recently sent.

6. Log out of all sessions: In User Settings > Devices, click "Log Out From All Devices" to terminate any active sessions, including the hacker‘s.

7. Secure linked accounts: If you had Steam, Twitch, PayPal or other accounts linked to your Discord, unlink them and change those passwords as well. Enable 2FA on all important accounts.

8. Scan for malware: Run a full malware scan on devices you use Discord on. Some sophisticated Discord hacks involve infecting your machine to harvest data. Keep your antivirus software updated.

9. Contact Discord support: Report the hack to Discord‘s Trust & Safety team with details on what happened. They can assist with remediation and potentially restoring your account.

10. Notify friends and servers: Let your contacts and the servers you‘re active in know that your account was compromised and to be on alert for any suspicious activity coming from you. Apologize for any spam or rude messages sent by the hacker.

Proactive Discord Security Tips

To avoid this headache in the future, here are some proactive steps every Discord user should take to secure their account:

• Use a strong, unique password and never reuse passwords across sites. Consider using a password manager.

• Enable 2FA on your Discord account and avoid sharing backup codes.

• Keep your Discord app and operating system up-to-date with the latest security patches.

• Be extremely wary of clicking links or downloading attachments sent on Discord, even from friends. Their account may be compromised.

• In Discord‘s privacy settings, limit who can send you direct messages and friend requests.

• Regularly review what information and images you‘ve made public on your Discord profile. Avoid oversharing personal details scammers could exploit.

• Be vigilant of common Discord scams like free Nitro offers, giveaways requiring login, or messages urgently asking for gift cards or money.

• If you run a Discord server, implement verification levels, enable 2FA requirement for admins, and use bots/automod to combat spam and malicious links.

• Educate friends and community members about Discord security best practices.

• Consider using a physical security key for 2FA instead of an authenticator app for added security against phishing.

Handling Worst-Case Scenarios

If the hacker used your account for illegal activities or you can no longer access the associated email address to reset your password, remediation becomes more challenging. Contact Discord support with any evidence proving prior ownership of the account.

Should personal information like your name, address, or payment details been exposed in the hack, take steps to protect your identity. Place a fraud alert on your credit report, notify your bank, and report identity theft to the proper authorities.

Staying Secure on Discord

Despite the looming threats, you can continue enjoying Discord by practicing good cyber hygiene and staying informed. Regularly audit your account‘s security settings, connected apps, and public facing information. Back up your important server data and configurations in case of future incidents.

By following this guide and implementing layered security controls, you greatly reduce the risk of your Discord falling into the wrong hands. Stay safe out there!