Fake support DMs are one of the most common Discord attack patterns. The scammer imitates staff or support, creates urgency, and pushes the target to click links, share credentials, or move funds.

This checklist helps you verify outreach quickly and act before community members are harmed.

Common Fake Support DM Pattern

  • Display name mimics admin or support roles.
  • Message claims a security emergency or account risk.
  • Target is asked to click a non-official link.
  • Conversation is moved off Discord for "verification."
  • Sensitive details are requested (password, code, wallet phrase).

10-Point Verification Checklist

  1. Verify whether the sender is listed in official server staff references.
  2. Check user ID where available, not just display name.
  3. Compare the message to official support scripts and tone.
  4. Confirm whether support policy allows first-contact via DM.
  5. Inspect links for domain mismatch and unusual subdomains.
  6. Look for pressure phrases ("act now", "final warning").
  7. Check account age/activity consistency if visible.
  8. Confirm no request for credentials or recovery phrases.
  9. Cross-reference handle usage on other public platforms.
  10. Escalate suspicious DMs to moderators before responding further.

Evidence to Capture

For faster moderation and abuse response, store:

  • Sender profile details and username variants
  • Full DM screenshots with timestamps
  • Any links, domains, or wallets requested
  • Server/channel context where targeting started
  • Affected user reports (if multiple members were targeted)

Response Sequence for Server Teams

  1. Warn members immediately using an announcement channel.
  2. State official support policy clearly (for example: "we never DM first").
  3. Instruct users how to report suspicious DMs.
  4. Collect evidence in one moderation thread or internal doc.
  5. Report impersonation through Discord trust and safety channels.
  6. Monitor for additional clone accounts using similar naming.

Useful Internal Paths

Bottom Line

Discord impersonation response works best when policy is public, verification is structured, and evidence is centralized. That combination protects users and helps platforms act with less back-and-forth.

Run a Discord Username Check →