For some users, having their accounts compromised may result in little more than frustration – although it’s unlikely that anyone would be happy with someone being able to impersonate them online. Opinion is split over the potential severity of this exploit.

“The login-by-QR method works without any username/password and 2FA, and while it makes Discord way more convenient to log into everywhere, it unfortunately is being exploited in the form of fake Nitro gifts (and possibly other forms),” said one Discord user.ĭiscussion of the QR code login exploit has taken place on various Discord servers In scanning the code, however, users inadvertently provide the attacker with access to their account.

While this feature is aimed at simplifying the Discord login process for desktop users, news has surfaced that fraudsters have been exploiting the system in an effort to gain unauthorized access to accounts.Īccording to discussions on various Discord servers and on social media, scammers have been posting QR codes with the promise of free Nitro, the platform’s subscription package that offers numerous perks, and other giveaways. In December, developers at Discord – a voice and text chat app widely used by the gaming community – announced the launch of a QR code feature that enables users to log into the desktop web client using their phone, by scanning the code that appears on-screen. Head over to your terminal, and run the following command: nodemon -inspect index.Login window reduced to two minutes, but is this enough to combat fraudsters?ĭiscord has made some changes to its QR code login system following reports that the mechanism is being abused by scammers trying to gain access to users’ accounts. Don’t ever post your token on the internet.Ĭopy this code, paste in your token at the bottom, and save it as index.js in a dedicated folder. Obviously, the token in the screenshot here is fake. The last line logs in with the token from the bot portal.If the message just says “ping,” then it will reply with “Pong!” The client.on('message') block will fire everytime a new message is posted to any channel. Of course, you’ll need to check the message content, and that’s what the if block does.Here, it’s just configured to log its name to the terminal. The client.on('ready') block will fire when the bot starts up.Line one imports the module into an object called “Discord,” and line two initializes the client object. The first two lines are to configure the client.This code is taken from the discord.js example. You could just use notepad, but we recommend either Atom or VSC.Ĭonsole.log(`Logged in as $!`)

How to verify phone discord fake