A common scam is if a user claims you've been accidentally/falsely reported to Steam or Discord for an infraction or fraud.
Don't follow instructions provided by anyone claiming to have accidentally reported your account.
The most common things that identify this scam are if someone:
• Says your account has been falsely or accidentally reported.
• Directs you to speak with someone through online chat to resolve an investigation or pending ban.
• Requests your account credentials or directs you to perform specific security-related operations.
• Requests an authentication code sent over email, SMS, or anywhere else.
• Says they represent Discord, Steam/Valve, or any other official entity.
• Says you must complete a purchase of any kind.
If you believe you have received a possible scam from a bot or user account, consider if they:
• Are new, unfamiliar, or unverified (in the case of bot accounts) contacting you unprompted.
• Are not from Discord in the form of an email or System-tagged account.
• Have poor grammar, spelling, or misuse of punctuation/capitalization.
• Offer things that are "too good to be true."
Official Discord gifting uses the discord.gift & discord.com domains and will generate a special embed, as Example 1 and Example 2
Scams like these are not possible through the official browser/client pages/menus.
• If these types of bots are repeatedly sending you messages, you can:
Use Mutual Servers to determine the servers they share with you and disable Direct Messages from server members for those servers.
• If you cannot find any shared servers, you can disable DMs from all servers under your User Settings
A user may pretend to be your friend or use a friend's compromised account to get you to download something.
Consider if they want you to:
• Scan a QR code
• Check out a video
• Test a game they made
• Practice running code they wrote
These are common forms of malicious behavior.
If a user asks you to scan/download something or click an unknown link, this could give away your login information and/or allow a malicious program to enter your computer, which can also compromise your account.
If your account sends these kinds of messages, your account has been compromised. If you...
• downloaded and executed malware: You should try and use a different device entirely to change your password (e.g., your phone). You should follow these steps to completely uninstall Discord, run a complete antivirus scan, and then re-install Discord. If your account is compromised again when logging in afterward, you may need to factory reset your computer.
• entered your password into a malicious website: You should change your password.
• something else: You should change your password.
There are several methods to report behavior you believe is a scam.
Use the integrated "Report Spam" button
You can learn how to properly report content here
• Scams and What to Look Out For