Discord is where many people keep their friends, their communities and sometimes their business. When your account starts spamming links you never sent, or you open the app to a disabled-account message, it feels like losing a phone book and a clubhouse at once. This guide separates the two problems, because they have different fixes, and gives you the official route for each.
All links and policies below come from Discord's own help pages, checked on October 30, 2026. Where Discord does not publish an answer, such as an exact appeal turnaround, we say that instead of inventing one.
Hacked and disabled often happen together
A typical chain: a fake 'free Nitro' or 'game test' link steals your login, the attacker spams your friends and servers, and Discord disables the account for the spam the real owner never sent. If that is your story, recover the account first and say clearly in your appeal that it was compromised.
Hacked vs. Disabled: How to Tell Which One Happened to You
| Sign | Likely hacked | Likely disabled |
|---|---|---|
| Can you log in? | No, or you get logged out repeatedly | You see a message that the account is disabled |
| Email on the account | Often changed by the attacker | Unchanged |
| Messages from your account | Spam or links you never sent | Not applicable |
| Email from Discord | 'Discord Email Address changed' or login alerts | A notice about a violation or account action |
| Correct first step | Revert the email, reset the password, hacked-account form | Appeal the violation at dis.gd/appeal |
If you cannot decide, look for the 'Discord Email Address changed' email. If it exists, you were hacked. If you instead have a notice naming a violation, you are dealing with an enforcement action.
How Discord Accounts Actually Get Taken Over
Discord says plainly that you are responsible for the security of your account, so knowing the entry point matters.
Fake Nitro and 'game test' links. Discord warns that suspicious links or files may appear as 'games' or promises of free Nitro but are designed to steal login credentials. These often arrive from a friend whose own account was already compromised.
Token theft. Your login token is a key that keeps you signed in. Malware and phishing pages can steal it, which lets someone use your account without ever knowing your password. Discord's safety guidance says it will never ask for your password or token.
The QR-code login scam. QR login exists so you can approve a login on your own device from your own phone. If a stranger sends you a QR code, or a scan shows a login approval you did not start, cancel it. Never approve a QR login that you did not generate yourself.
Social engineering and fake staff. Scammers pose as Discord employees offering to 'appeal actions on your account', or ask for card details to help you 'win a giveaway'. Discord says staff will never contact you directly through the app for support matters.
Password reuse. If your Discord password matches one from a site that was breached, attackers try it automatically. A unique password per site ends that risk.
Not sure how the attacker got in?
Discord can restore access, but it cannot tell you whether a token stealer is still running on your computer. Our certified bilingual technician scans the device, removes anything suspicious and sets up 2-step verification correctly across your accounts.
Why Discord Disables Accounts
Discord says repeated rule violations, or one particularly serious violation, can lead to loss of account access. Examples of conduct that can trigger enforcement include spam, mass unsolicited messages or invites, unusually rapid server joining or friend requests, self-botting or account automation, and fraudulent or abusive activity. Severe safety violations can lead to permanent removal.
The Discord Warning System separates warnings from violations. A warning does not affect your account standing. A violation does, and repeated or serious ones can end in permanent suspension. You can see your own record under User Settings, My Account, Standing.
| Notice | What it means | What to do |
|---|---|---|
| Warning | You were near rule-breaking content; standing is unaffected | Learn the rule, no appeal needed unless it was wrong |
| Violation | A rule was broken; standing is affected | Review it in Standing, appeal if it is a mistake |
| Temporary or permanent disable | Access is removed after repeated or serious violations | Appeal the specific violation at dis.gd/appeal |
Anyone offering to 'appeal for you' is the scam
Discord staff never contact users through the app about support. A person who says they can restore your account, reverse a ban or speed up an appeal for money, or who asks for your password, token or a QR scan, is trying to take over or defraud you. Use only dis.gd/appeal and dis.gd/hackedaccount.
Unauthorized Charges and Chargebacks
If the attacker bought Nitro or spent from your saved payment method, include that in your hacked-account request at dis.gd/hackedaccount. For a refund request, Discord points to its billing team at dis.gd/billing.
Be careful with your bank. Discord states that filing a chargeback or refund request with your financial institution may result in account suspension pending further investigation. See Discord's Chargeback FAQ before you call your bank, and if the bank has already been contacted, mention it honestly in your ticket.
Locked Out Completely: Email Changed, No Way In
When both the email and password were changed, you cannot use the normal reset. Build the strongest possible case before filing:
- Your username and, if you know it, your user ID
- The original email address and any old email you used on the account
- Receipts for Nitro or server boosts with dates and amounts
- Screenshots of the 'Email Address changed' notice or login alerts
- A short timeline: last normal login, when you noticed, what the attacker did
- Any server names or admins who can vouch for the account being yours
File this through dis.gd/hackedaccount and provide all required information. Open one ticket, keep the case number, and avoid sending duplicates. If you need to reach support another way, the general form is at support.discord.com, where you pick the option that matches your problem.
One honest limit: Discord's own text warns that if you failed to secure your account and it was compromised, it may be unable to assist in recovery. That is why speed and evidence matter, and why you should start with the email-revert link if you still have it.
Preventing a Repeat Takeover
- Multi-Factor Authentication on, with backup codes stored offline.
- A unique password kept in a password manager.
- Never run files from DMs or servers, even from friends. Ask them on another channel first.
- Never scan a QR code a stranger sends and never approve a login you did not start.
- Review Authorized Apps every few months and remove anything you do not use.
- Keep the device clean. A token stealer survives a password change if it is still on the machine.
7 Steps to Recover a Hacked or Disabled Discord Account
Check your email for the 'Discord Email Address changed' message
If an attacker changed your email, Discord sends a notice to the old address. Per the official hacked-account article, that message contains a link that lets you temporarily change the email back. Search your inbox and spam folder for it first, because it is the fastest way back in.
Reset your password and log out everywhere
Use 'Forgot your password?' on the Discord login screen, choose a brand-new password you have never used elsewhere, and sign out of all devices. If you reused the old password on other sites, change it there too.
Turn on Multi-Factor Authentication
Follow Discord's guide to set up Multi-Factor Authentication. Save the backup codes offline. This blocks most repeat takeovers even if your password leaks again.
Remove unknown Authorized Apps
Open User Settings, then Authorized Apps, and deauthorize anything you do not recognize. On mobile, tap your avatar, then the cogwheel, then Authorized Apps. A malicious app or bot can keep access even after a password reset.
Scan your device for malware
Discord recommends running a Windows Defender scan if you are on Windows. Token stealers hide inside fake games, cracked software and 'free Nitro' files. If the device is infected, a new password will be stolen again.
Submit the official hacked-account form if you are locked out
If you cannot get in, file a ticket at dis.gd/hackedaccount. If there were unauthorized charges, say so in the same request and include all the information the form asks for. Discord notes that if an account is compromised because it was not secured, it may be unable to help with recovery, so provide as much proof as you can.
Appeal a disabled account on the specific violation
If Discord disabled your account for breaking a rule, go to dis.gd/appeal or use User Settings, My Account, Standing, select the violation, then 'Let us know'. Appeal the specific violation, not your standing overall, and explain plainly if the account was compromised when it happened.
Want a person to walk you through it?
Our technician can join you on a remote session, run the malware scan Discord recommends and help you file the right form with the right evidence.
Worried a token stealer is still on your PC?
Discord can restore access, but it cannot clean your computer. IT Cares scans for token stealers and keyloggers, hardens passwords and sets up multi-factor authentication properly across your accounts.
Frequently Asked Questions
How do I know if my Discord account was hacked?
Common signs are a password that stops working, an email address you did not change, messages or friend requests you never sent, servers you did not join, and login alerts. Check your inbox for a 'Discord Email Address changed' message, since that confirms the email was altered.
What is the difference between a hacked and a disabled Discord account?
A hacked account means someone else got in, usually through phishing, a reused password or a stolen login token. A disabled account means Discord itself took away access after rule violations, such as spam, mass unsolicited messages or invites, rapid server joining, or self-botting. The fix is different: hacked accounts use the hacked-account form, disabled accounts use the appeal.
How long does a Discord appeal take?
Discord does not state a guaranteed review time. It says reviews can take time and that it prioritizes people who believe they were permanently suspended in error. Appeal as soon as you can, follow the instructions in your notice, and avoid opening duplicate tickets.
Does a Discord warning hurt my account standing?
No. Discord's warning system separates warnings from violations. A warning can be sent when you were in a rule-breaking server or interacted with violating content without personally breaking a rule, and warnings do not affect account standing. Violations do, and repeated or serious ones can lead to permanent suspension.
Should I file a chargeback for charges made by the hacker?
Do not do it first. Discord says filing a chargeback or refund request with your bank for Discord transactions may result in account suspension pending investigation. Submit the hacked-account request and mention the unauthorized transactions, and contact the billing team at dis.gd/billing for refunds.
Can someone pay to unban or recover my Discord account?
No. Discord says staff will never contact you directly in the app for support matters and will never ask for your password or token. People who claim they can appeal your account for you, or who ask for payment or a login, are scammers.