How to Stop Scam Links and Hacked Accounts in Discord

6 min read · Updated September 2026

It happens to every big server eventually: a trusted member's account gets hacked and blasts "free Nitro" or "Steam gift" links into every channel. Members click, and more accounts get stolen. Here's how to stop it spreading.

In this guide
  1. How scam blasts work
  2. Step 1: Turn on Discord AutoMod
  3. Step 2: Automatic scam-blast protection
  4. Step 3: After an attack
  5. Questions

How scam blasts work

Scammers steal a Discord account (often through a fake "vote for my server" or fake game-tester site), then use it to post the same link in many channels at once. The links use lookalike domains like disc0rd-nitro.gift or steamcommunnity.com. Because the account is a real member with roles, verification doesn't stop it.

Step 1: Turn on Discord AutoMod

  1. Server Settings → AutoMod.
  2. Enable Block Mention Spam and Block Spam Content.
  3. Add a custom keyword rule for words like nitro, free gift and steam gift, set to block and alert.

This catches the obvious ones, but keyword lists miss new lookalike domains and don't clean up messages already posted in other channels.

Step 2: Automatic scam-blast protection

A dedicated bot can detect the pattern: the same link or text posted across channels within seconds, or a known lookalike domain. Nodariq Guardian ($2.99/month, any plan) does this:

Run /guardian setup. Servers without the add-on still get alert-only previews.

Step 3: After an attack

  1. Post a quick announcement: "Don't click links from @user, their account was hacked."
  2. Ask the member to change their password, turn on 2FA and log out all devices (User Settings → Devices).
  3. Remove the timeout once they've recovered the account.

Questions

Can Discord AutoMod block all scam links?

No. AutoMod works on keywords and patterns you set, so new lookalike domains slip through. Use it as a first layer, alongside a bot that detects repeated links across channels.

Why doesn't verification stop this?

The account doing it is a real, verified member whose account was stolen. Only behaviour-based detection (the same link in many channels at once) catches it.

What does Nodariq Guardian cost?

$2.99/month per server, on top of any plan, including Free.

Keep reading

How to Add Verification to Your Discord ServerStop raid bots and spam accounts with a Discord verification gate: a Verify button, minimum account age and a Verified role. Free step-by-step guide.How to Make a Ticket System in Discord (Free, 2026)Create a Discord support ticket system with a button panel, private channels, question forms, staff pings and transcripts. Step-by-step, free.How to Track Who Invited Who in DiscordSee which invite each new member used, run invite leaderboards, filter fake joins and reward top inviters with roles. Free Discord invite tracking guide.