Last updated: March 2025

Phishing Links in Discord: What to Look For

Phishing in Discord often uses links that look like real Discord, Steam, or other services to steal login credentials or take over accounts. Here’s what to look for and how to add Discord phishing protection to your server.

Common Discord phishing tactics

• Fake “free Nitro” or reward links — Sites that mimic Discord’s login page to capture your token or password.
• Fake game or platform links — Malicious sites pretending to be Steam, Epic, or other platforms.
• Shortened or disguised URLs — Links that hide the real destination (e.g. bit.ly, or misspelled domains like discord-gift.com).
• DMs from unknown users — Unsolicited messages with “you’ve been selected” or “claim your prize.”

How to spot phishing links

Check the URL before clicking: official Discord domains are discord.com and discordapp.com. Be suspicious of similar-looking domains, typos, or subdomains you don’t recognize. If a message pressures you to act quickly or “verify” your account, treat it as suspicious. Discord and legitimate services don’t ask for your password via random links.

Protecting your server with phishing detection

A Discord security bot with phishing detection can scan messages and images for known phishing patterns and suspicious links, then delete them or alert staff. Scam Sentinel uses AI to detect phishing and scam content in real time. You can enable or disable categories (including phishing) per server from the web dashboard. For a full security overview, see our Discord security guide.

Discord security guide · Identify fake Discord bots · Discord invite scams · Features