Discord fake verification phishing scam

The discord verification scam or the 'discord qr code scam' or just 'discord phish' is a scam that has been going on since 2022, died down for a few years then got very popular among scammers again in 2026. There are 3 types of this scam. All of which steal your discord account but do it in different ways. First, let's see how it works.

The chances are, you've probably seen or received a message like this. Whether it's in a dm from your friend or in a random server. You probably have because of how big this scam has gotten. These people have all gotten hacked by the scam and the bad actor behind the phishing server is now using a bot to mass spam messages.

These messages are from hacked accounts who fell for the scam, as soon as your account gets compromised every server, friend or group chat gets spammed with an invite to the scam server. The messages normally say something like 'free 'photos' wtf - scaminvitelink'. If you're someone who uses discord for business or crypto then you might get a less weird message and one talking about job hiring instead.

If you see one of these messages, just ignore it. Nothing will happen if you don't interact with it.

If you are unsure whether something is a scam, treat it as suspicious when the verification bot looks newly created, when it asks you to scan a QR code or visit an unknown website, or when you only joined the server because of a pitch like 'free photos'. If any of those apply, it's almost certainly a scam.

For fake staff and ticket bots in DMs, see Is this support legitimate. The broader fake helpdesk pattern on Discord and Telegram is covered in Discord and Telegram support desk scam.

1 Captcha bot / security bot Phishing Website

This is the most common scam template, a fake discord captcha bot or security bot in the 'free photos' discord server. Instead of sending you to the legitimate captcha.bot or security.gg url, the bot then sends you to a link shortener which redirects you to a phishing link. They can't use the main phishing link because discord flags it (wonder who's responsible for that 😏).

The discord server is setup in a way where it looks legitimate, with the 'model' in a voice camera but you have to verify to have access to it.

If you enter your discord username and password into that fake website, then it will be sent to the scammer and you'll turn into one of those 'free photos' bots.

2 — Old 'scan this QR code' scam.

This type of scam was old and hasn't really been used since; it relied heavily on Discord's 'scan this QR code to login' aka quick login feature. It was similar in the way that it lured people into the server with the false promise of 'free photos' and also impersonated popular bots like Wick or Captcha bot.

For context, discord has a feature where you can login with a qr code via the 'scan qr code' section on another device like a phone. Bad actors abused this to create bots that asked you to scan their own generated login qr code. This would give them access to your account. The worst part about this scam is that it could work even if you had 2FA enabled, because Discord's QR login did not require you to enter 2FA on the device you scanned from.