is that a scam?
← Back to all scams
HIGH phishing Share

A Discord or Reddit "friend" says they accidentally reported you — fake support steals your account

A message from an online friend on Discord or Reddit claims they accidentally reported your account. Fake support staff then asks for your 2FA code or email change to clear the report — giving scammers full control of your account.

Also known as: Discord false report scam, Reddit account takeover scam, I accidentally reported you scam, fake Discord support scam, platform support impersonation

What to do right now

  1. 1 Ignore any DM claiming you were accidentally reported — this is always a scam on both Discord and Reddit
  2. 2 Never share a verification code or 2FA code sent to your email or phone with anyone, no matter what they claim
  3. 3 Never change your account email address at someone else's request — that is the first step in an account takeover
  4. 4 If you already handed over a code: immediately go to the platform's official account recovery page and change your password before the attacker does
  5. 5 Alert contacts on your account that you may have been compromised and they should distrust any messages from your account
  6. 6 Report to the FTC at https://reportfraud.ftc.gov and the FBI's IC3 at https://www.ic3.gov.

Red flags

  • Discord and Reddit never handle report disputes through private direct messages — any 'support agent' reaching out via DM is fake
  • Discord staff will never contact you inside the Discord app about account issues — official support only happens at discord.com/support
  • A '2FA verification code' or 'email change' is never needed to clear a false report — these are credential-theft steps
  • The scammer creates panic by claiming your account and IP address will be permanently banned within hours
  • The 'accidental reporter' may be someone you have chatted with for weeks — scammers build trust over time before striking
  • Any code sent to your email or phone at the scammer's instruction is actually a password reset code, not a 'verification' code

Sources

Share this with someone who might need it