NodariqHow to Stop QR Code Scams on Discord (2026)
A new member posts an image: "Scan this QR code to verify" or "claim your free Nitro". Anyone who scans it with the Discord app can hand over their whole account. Here's how the scam works and how to stop it automatically.
How the scam works
The QR code is often Discord's own login QR. On your computer, Discord shows a QR so you can log in by scanning it with your phone. Scammers grab that code from their login screen and post it. When a victim scans it with the Discord app, they approve the scammer's login. The scammer then has the account, and uses it to post the same scam in more servers.
Link filters don't catch this, because there's no link in the message. The scam is inside an image.
How to stop it
- Read QR codes in images. Nodariq reads every image posted in your server, decodes any QR code in it, and removes the message if the QR is a Discord login code or points to a known scam. It's free on every plan and on by default when Guardian runs.
- Verification. Most QR scams come from brand-new or hacked accounts. A verify gate with a minimum account age stops many before they can post.
- Tell your members. Pin a note: "Staff will never ask you to scan a QR code."
What about normal QR codes?
QR codes to big real sites (YouTube, TikTok, Twitch and similar) are never flagged, and you can add your own trusted sites. Only login QRs and scam links are removed.
Questions
Is QR scam protection free?
Yes. Nodariq scans images for scam QR codes on every plan, including Free.
Why don't normal link filters catch QR scams?
Because the scam link is inside an image, not in the message text.
What should someone do if they scanned one?
Change their Discord password right away (that signs out every session) and turn on two-factor authentication.