Hacked Discord Account: How to Recover It (2026)

Quick answer: Check your email first, including the spam folder, for a message from Discord called "Discord Email Address changed". If you find it, its Start Account Recovery button can undo the change. If you cannot, or you are still locked out, submit Discord's hacked account form at dis.gd/hackedaccount from the email address the account used before it was compromised. If you can still log in, change your password, remove apps you do not recognise, and turn on multi-factor authentication.

This guide follows Discord's own help pages, listed at the end. Discord's pages say you are responsible for your account's security and that, if you fail to secure it and it is compromised, Discord may be unable to help recover it. So act quickly and use only Discord's routes.

What to do in 3 steps

1. Check your email for "Discord Email Address changed". Look in the inbox and the spam folder of the email the account used. If the message is there, press Start Account Recovery within 48 hours (see below).
2. Reset or change your password. If you are logged out, go to discord.com/login, enter your email, and select Forgot your password?. If you are logged in, go to User Settings, then My Account, then Change Password.
3. Remove apps you do not recognise and turn on multi-factor authentication (MFA). In User Settings, open Authorized Apps and deauthorize anything unfamiliar.

If the email address was changed: use the revert link

When an email change is confirmed, Discord sends a notice to the original address with a button to undo it within 48 hours. The link in a genuine message starts with https://discord.com/wasntme/. Discord says anything else is fake. Do not share the link with anyone.

After you press Start Account Recovery and follow the prompts, Discord says the process will:

• change the account email back to the previous address;
• log the account out of all devices and make you set a new password;
• remove any phone number and multi-factor authentication methods on the account.

Add your phone number and MFA back afterwards. Discord says that if the link has expired, its support team cannot send a new one. The link can also fail if an earlier recovery was already done, or if another Discord account uses that email address.

If the attacker took over your email account too, secure that first. See our guide to recovering a hacked Gmail account.

If you can still log in: lock it down

• Password. Discord requires at least 8 characters and recommends one you use nowhere else. On desktop or browser: User Settings, My Account, Change Password. On mobile: tap your avatar (bottom right), the cogwheel (top right), Account, then Password. If MFA is on, Discord asks for your code first.
• Authorized Apps. On desktop or browser, tap the cogwheel (lower left) to open User Settings, then Authorized Apps, then Deauthorize next to any unwanted app. On mobile, tap your avatar, then the cogwheel, then Authorized Apps, and tap the x beside any you do not recognise.
• Multi-factor authentication. Discord supports security keys (passkeys), an authenticator app and SMS, and recommends a security key. It says SMS is better than nothing but not by much, does not recommend it, and only lets you enable it after setting up an authenticator app. To add a passkey, go to User Settings, Account, Security Keys, then Add.
• Backup codes. After turning on MFA, save your backup codes. Discord says its support team cannot remove MFA from an account.
• Check your device. Discord warns that suspicious links or files, such as fake "games" or "free Nitro" offers, are often built to steal your login. It suggests running a virus scan if you are on Windows.

If you are locked out

Forgot your password. Go to discord.com/login, enter your account email, select Forgot your password?, and follow the email Discord sends. If MFA is on, you need your code. Discord says its support team cannot reset your password for you.

Locked out of MFA. At the code prompt, choose Verify with something else, then Use a backup code and enter an unused 8-digit code, or use a code sent to your phone if you added SMS. Discord says that without backup codes it cannot remove MFA or issue new codes.

The attacker changed everything: Discord's hacked account form

If you cannot get back in, Discord says to submit a ticket at dis.gd/hackedaccount. Things to know:

• Your Discord Support login is separate from your Discord app login. To submit, you sign in to the support site; if you have no support account, choose Sign in, then Sign Up, and activate it using the email Discord sends (subject "Activate account for Discord Support", from [email protected]).
• The form says to submit from the email address associated with the account before it was compromised, and that Discord cannot assist if you write in from the wrong address.
• It asks for your username, optionally your User ID, the email the account used before it was compromised, how you think the account was compromised, whether the email was changed, whether you can log in, and whether the hacker turned on 2FA. You can attach files.
• You get a confirmation email with a ticket number. Reply to the same ticket with new information rather than opening another.
• Discord says its support team responds by email, so watch the inbox you used for your support account (and its spam folder).

Discord's article says the team will help according to its policies and guidelines. It gives no time frame, no guarantee and no phone number.

If there were charges you did not make

Tell Discord on the hacked account form that there were unauthorized transactions, giving the date and a payment ID. Discord warns that filing a chargeback or refund request directly with your bank for transactions that happened on Discord may result in account suspension pending investigation. For more, see Discord's Chargeback FAQ. Discord says refund requests go to its billing team at dis.gd/billing. If money was taken from you, our guide on what to do right after a scam can help.

If an action was taken against the account

Discord says you can appeal an action taken against your account in the app: User Settings, then My Account, then Standing. Select the violation, then press Let us know. If an appeal is granted, the violation is removed, but other active violations may still limit access. The support form also has a category called "Appeals & Age Update Requests".

After you are back in

Look at your messages and servers for anything you did not do, and tell friends to ignore links sent from your account. Check Authorized Apps again, and make sure MFA is on.

Warning: fake support and fake recovery offers

Discord says its staff will never contact users directly through the Discord app for support. If someone asks for personal information or payment, or pushes you to change your login details, do not comply. Discord gives examples of scammers pretending to be Discord employees who offer to "appeal actions on your account" or ask for card details to "win a giveaway". Do not pay anyone offering to recover your account.

If you are being threatened or blackmailed

If someone threatens to share private images or messages, do not pay or reply. See our sextortion and blackmail guide and report it to the police.

If it is a child's account

Ask a parent or another trusted adult to help with these steps.

We checked the steps against Discord's own help pages on 26 October 2026; menus change, so follow the on-screen prompts if they differ.

Sources

• Discord Support: My Discord Account was Hacked or Compromised
• Discord Support: My Discord Email was Changed and I Want to Undo It
• Discord Support: How to Reset or Change Your Forgotten Password on Discord
• Discord Support: Setting up Multi-Factor Authentication
• Discord Support: How to Recover Your Discord Account When Locked Out of Multi-Factor Authentication (MFA)
• Discord Support: Submit a request (hacked account form)
• Discord Support: How to Submit a Support Ticket to Discord
• Discord Safety Center: How You Can Appeal Our Actions

If you have been targeted, you are not alone. See our country-by-country cybercrime help hub for step-by-step reporting and recovery guides.