Discord ticket scams: how to spot fake support

What a Discord ticket scam is

A ticket scam impersonates a server's support team, or Discord itself, to steal accounts, payments, or personal data. The scammer usually starts in direct messages, claims to be staff, and asks the victim to open a ticket on an outside website or in a look-alike server.

Warning signs

• A direct message from someone claiming to be staff, often right after you asked a question in a public channel.
• A link to a look-alike support website, or to a different Discord server that copies the real one.
• Requests for your password, two-factor codes, a QR code scan, or a bot token.
• Pressure to act quickly, such as a warning that your account is about to be banned.
• A request to pay a fee or send cryptocurrency to verify a purchase or unlock an account.

Rules of thumb for members

• Real staff do not start support by messaging you from a personal account.
• Discord will never ask for your password or send you a QR code to scan.
• Check that the person has the server's staff role in the member list before trusting them.
• Open tickets only from the server's own ticket panel or its official ticket bot.
• Never share a bot token. Anyone who has it controls the bot.

How server owners can reduce the risk

• Pin a message that says staff never start support from personal accounts in direct messages.
• Handle support in private ticket channels inside your own server.
• Give staff a clearly named role that sits above member roles.
• Ask members to report anyone who contacts them pretending to be staff.
• Require two-factor authentication for moderators in your server's safety settings.

How Tessolva helps

Tessolva keeps support inside your server or in direct messages with your own bot, so members never need an outside website. Private ticket channels and threads are visible only to the member and the staff roles you choose. Your bot is your own Discord application, and with Public Bot turned off, as the setup guide recommends, nobody else can add it to a look-alike server. Transcript links on tessolva.com are private and only open for dashboard accounts with access to the ticket.

If you were targeted

• Change your Discord password and turn on two-factor authentication.
• Log out of every device you do not recognize in your Discord settings.
• Report the account to Discord Trust and Safety.
• Tell the real server staff through the server's own ticket panel.
• If you shared a bot token, reset it in the Discord Developer Portal right away.