Can you get hacked on Discord by accepting a DM or friend request?

Can accepting a Discord DM get you hacked?

Accepting a Discord DM does not get you hacked, because acceptance only moves the chat into your main inbox. Discord limits what a message request can do before that. Images and files stay hidden, and links show as plain text you cannot click.

The same holds for a friend request on Discord. Adding someone gives them an easy way to message you, and that is the whole reason hackers send so many requests. Nothing happens yet. The account stays safe until you open what they send, run what they share or type a code where they ask.

How do Discord DM hacks actually work?

Discord DM hacks work by getting you to act. The help center names the usual bait: fake games and promises of free Nitro built to steal login details. A second route is social engineering, where someone poses as Discord staff and offers to appeal actions on your account.

Discord's hacked-account guidance gives concrete examples of that social engineering. Scammers impersonate Discord employees who offer to appeal actions on your account, or ask for credit card details so you can win a giveaway. Discord staff never contact users through the app for support, so any such DM is fake.

Is it dangerous to reply to a stranger on Discord?

Replying to a stranger on Discord is not dangerous by itself, since a text reply gives the other side no access to your account. What you reveal can still matter. The tips at discord.com/safety warn against sharing personal information with people you do not know and trust.

Discord never shares your IP address with other users, so a chat alone does not expose it. Bad actors may still send IP grabber links or other scams to get it, which is one more reason to leave every unknown link in a stranger's DM unopened. Discord also never asks for your password or token, and a DM asking for either is a scam.

What happens if you accept a Discord friend request?

Accepting a Discord friend request moves that person out of Message Requests, so their DMs land straight in your main list. That is the real change. Message Requests show DMs from non-friends first as a limited preview, with files hidden and every link turned into plain text you cannot click.

Once you accept, that person's DMs skip the preview, so their images, files and clickable links reach you directly. Accepting still cannot get you hacked by itself, since the friendship gives the other person no access to your account, your password or the devices you are logged in on. Accept requests from people you actually know. Ignore the rest.

What goes wrong after accepting a Discord DM?

The worst mistake after accepting a Discord DM is opening a shortened or unfamiliar link on trust. Discord suggests checking such links with a scanner like Sucuri or VirusTotal, 2 free options. Run short URLs through an expander too, so you know where a link leads before it loads. Check first.

Other mistakes are trusting a friend's account blindly and running files that promise Nitro or a game beta. A hacked friend sends bait in their own name, so the trick works. When a known contact suddenly pushes a download, check with them outside Discord first. The Discord security guide shows how passkeys limit the damage.

For example, when 3 friends receive the same free Nitro link from one contact within minutes, that contact's Discord account is the hacked one. Warn them outside Discord.

Where your phone number fits if a DM gets you hacked

A phone number cannot stop a bad DM link, but it decides how easily you recover after one. Discord allows one phone number per account and can use it as SMS backup for multi-factor authentication. Pick a number only you can read, such as your own SIM or a private number (coming soon). Public lines from our free Discord numbers page show every text to anyone who opens the page.

Check a Discord DM before you trust it

1. Read the previewOpen the request in Message Requests, where files stay hidden and links show as plain text.
2. Check the senderView the profile and the servers you share before you accept anything.
3. Scan any linkRun unfamiliar links through VirusTotal or Sucuri and expand short URLs first.
4. Never send codesIgnore any request for a password, token or login code, since Discord never asks for them.
5. Accept, ignore or reportAccept only people you know, and use Report Message on anything that looks like a scam.