How to Stop Scam Links and Hacked Accounts in Discord
It happens to every big server eventually: a trusted member's account gets hacked and blasts "free Nitro" or "Steam gift" links into every channel. Members click, and more accounts get stolen. Here's how to stop it spreading.
How scam blasts work
Scammers steal a Discord account (often through a fake "vote for my server" or fake game-tester site), then use it to post the same link in many channels at once. The links use lookalike domains like disc0rd-nitro.gift or steamcommunnity.com. Because the account is a real member with roles, verification doesn't stop it.
Step 1: Turn on Discord AutoMod
- Server Settings → AutoMod.
- Enable Block Mention Spam and Block Spam Content.
- Add a custom keyword rule for words like
nitro,free giftandsteam gift, set to block and alert.
This catches the obvious ones, but keyword lists miss new lookalike domains and don't clean up messages already posted in other channels.
Step 2: Automatic scam-blast protection
A dedicated bot can detect the pattern: the same link or text posted across channels within seconds, or a known lookalike domain. Nodariq Guardian ($2.99/month, any plan) does this:
- Deletes the scam messages from every channel, not just the one it caught.
- Times out the hacked account so it can't keep posting.
- Alerts your staff with one-click Unlock (once the owner recovers the account) or Ban.
Run /guardian setup. Servers without the add-on still get alert-only previews.
Step 3: After an attack
- Post a quick announcement: "Don't click links from @user, their account was hacked."
- Ask the member to change their password, turn on 2FA and log out all devices (User Settings → Devices).
- Remove the timeout once they've recovered the account.
Questions
Can Discord AutoMod block all scam links?
No. AutoMod works on keywords and patterns you set, so new lookalike domains slip through. Use it as a first layer, alongside a bot that detects repeated links across channels.
Why doesn't verification stop this?
The account doing it is a real, verified member whose account was stolen. Only behaviour-based detection (the same link in many channels at once) catches it.
What does Nodariq Guardian cost?
$2.99/month per server, on top of any plan, including Free.