Discord Law Enforcement Data Request: Police & Government Guide

How authorised law enforcement and government agencies lawfully obtain user data from Discord: the Kodex portal, data tiers, emergency requests, and India's MLAT process.
Discord is a voice, video and text messaging platform with over 500 million registered accounts and roughly 19 million active servers (guilds) daily. It is routinely encountered in cybercrime investigations: cryptocurrency and gaming-item fraud carried out in private servers, sextortion campaigns targeting minors, child sexual abuse material (CSAM) shared in encrypted channels, swatting co-ordination, and the sale of malware, stolen credentials and initial-access brokers in invite-only communities. Discord Inc. is incorporated in the United States and its data is governed primarily by the federal Stored Communications Act (18 U.S.C. § 2701 et seq.).
- How to submit: All law enforcement and government requests must be submitted through Discord’s Government Request Portal, powered by Kodex, at https://app.kodexglobal.com/discord/signin. Account registration requires a valid government-domain email and identity verification by Kodex. Discord does not accept requests by post or general email.
- Identifiers accepted: The 17- or 18-digit Discord user ID (numeric snowflake), case-sensitive username, registered email address, or phone number. Server (guild) IDs and message IDs are also accepted. Display names are not accepted — they are non-unique and changeable.
- What is returned — and what needs a warrant: A subpoena yields non-content subscriber records (username, email, phone, registration IP, login history, account creation date, Nitro payment details). A court order under 18 U.S.C. § 2703(d) adds expanded metadata and transaction logs. A search warrant is required for message content — direct messages and server messages. Discord does not store voice or video call content.
Identifiers for a data request
Every Discord account, server and message carries a unique numeric identifier (a “snowflake” ID). Providing the correct identifier is mandatory — a display name or nickname is insufficient because users may share names or change them at any time.
Enabling Developer Mode (to copy IDs):
- Desktop / Web: Click the gear icon next to your username › Advanced tab › toggle Developer Mode on. Then right-click any username, server name or message and select Copy ID.
- Mobile (Android): Tap your avatar › App Settings › Behaviour › toggle Developer Mode. Tap the three-dot menu on a server or user to find Copy ID.
- Mobile (iOS): Tap your avatar › Appearance › Advanced › toggle Developer Mode.
For server (guild) IDs, right-click or long-press the server name in the sidebar and select Copy Server ID. For message IDs, right-click the specific message. These IDs, alongside timestamps, allow Discord to precisely scope what data is preserved or produced.
What data Discord provides
Discord operates a three-tier disclosure model tied to U.S. legal-process standards:
| Legal process | Standard | Data produced |
|---|---|---|
| Subpoena | Relevance | Username, email, phone number, account creation date, registration IP address, login IP history, session timestamps, Nitro payment method (last four digits & billing address) |
| Court order (18 U.S.C. § 2703(d)) | Specific & articulable facts | All subpoena-level data plus expanded metadata, transaction logs and additional non-content records |
| Search warrant (probable cause) | Probable cause | All of the above plus direct messages, server channel messages, uploaded files and created content. Message content is stored indefinitely unless deleted by the user. |
What Discord does not retain: Discord does not record or store the contents of voice calls, video calls or live streams. Those channels are effectively inaccessible even under warrant.
Post-deletion retention: After account deletion, email addresses are retained for approximately 180 days (extended to two years if the account was policy-flagged). Backup purge takes a further 30–45 days.
User notification: Discord’s default policy is to notify the account holder that their data has been requested, unless a valid non-disclosure order or relevant statute prohibits notice. Discord does not notify users of preservation requests or emergency disclosure requests.
How to submit a request
- Register on the portal. Visit https://app.kodexglobal.com/discord/signin and create an account using a valid government-domain email address. Kodex will verify your identity and agency affiliation before granting access.
- Issue a preservation request first (if time is critical). Discord preserves account data for an initial 90-day period under 18 U.S.C. § 2703(f), extendable by a further 90 days on request. Preservation buys time to obtain formal legal process. Discord accepts preservation requests from foreign law enforcement through the same portal.
- Submit your legal process. Upload the subpoena, court order or warrant through the portal with the required Discord identifiers. Discord may seek reimbursement for costs directly incurred in responding, as permitted by federal statute.
- CSAM / NCMEC Cybertip cases. If your investigation originated from a NCMEC CyberTipline report, include the Cybertip number in your request. Discord files Cybertip reports with NCMEC and uses that reference to scope production accurately.
Discord does not accept requests via postal mail, fax or standard email. All communication after submission is handled within the Kodex portal.
Emergency disclosure requests
Where there is an imminent risk of death or serious bodily injury, Discord may voluntarily disclose both subscriber information and message content without any subpoena, court order or warrant, under the emergency exception to the Stored Communications Act.
To qualify, the requesting officer must submit through the Kodex portal and articulate:
- The specific nature of the emergency and why it is imminent;
- The precise data type needed and how it addresses the emergency;
- The relevant Discord identifier(s) for the account(s) in question.
Discord does not notify the user of an emergency disclosure request. Approval is at Discord’s discretion. Emergency requests for CSAM or active threats to a child’s safety are among the most frequently granted categories.
For India: legal basis and process
Discord is a U.S. entity. Indian law enforcement cannot serve U.S. legal process directly. The applicable domestic instruments create the authority to demand data; the cross-border mechanism determines whether Discord will honour the demand.
- IT Act, 2000 — Section 69: Authorises the Central or State Government to direct interception, monitoring or decryption of electronic information in the interest of sovereignty, security, public order or prevention of offences. Directions are typically addressed to intermediaries operating in India; Discord’s compliance with Section 69 orders for US-stored data remains subject to MLAT.
- IT Rules, 2021 — Rule 3 (Intermediary Guidelines): Significant social media intermediaries must appoint a nodal officer resident in India, available 24×7 for law enforcement coordination, and retain records for at least 180 days. Discord does not publish a standalone India nodal-officer contact; route takedown, content-removal and first-level coordination through Discord’s official Government Request Portal (above), and escalate to MLAT for account data.
- BNSS, 2023 — Section 94: Courts and officers-in-charge of a police station may issue a summons (including in electronic form) requiring production of documents, electronic communications and communication devices containing digital evidence. This is the domestic production-order mechanism; for US-based service providers, it is referenced in the MLAT request sent to the U.S. Department of Justice.
- Mutual Legal Assistance Treaty (MLAT) for content: For account data and message content, the standard path is: investigating officer drafts request › forwarded to the MHA Central Authority › MHA transmits to the U.S. Department of Justice Office of International Affairs (OIA) › OIA compels Discord via U.S. court process. Average turnaround is 10–12 months. For urgent matters, Indian agencies may simultaneously submit an emergency disclosure request directly through the Kodex portal if life is at immediate risk.
Indian investigators should initiate a preservation request through the Kodex portal at the earliest opportunity to prevent data deletion while the MLAT process runs.
What you’ll need
- A verified government-domain email to register on the Kodex portal;
- At least one valid Discord identifier: numeric user ID (17–18 digits), case-sensitive username, registered email, or phone number;
- Server (guild) ID and/or message ID if the scope extends beyond a single account;
- The appropriate legal instrument — subpoena for subscriber info, warrant for message content;
- For CSAM cases: the NCMEC CyberTipline reference number;
- For Indian agencies seeking content: an MLAT request through MHA, plus a parallel Kodex preservation request filed immediately.
For a full directory of law enforcement request portals across major platforms, visit our LERS portal hub or the platform-by-platform LERS guide.