Discord Mr Beast Scam - How to Protect Yourself

How the Scam Works

• The Initial Infection: The attacker does not actually crack your password. Instead, you likely downloaded a hidden "infostealer" malware bundled inside fake software, a cracked game, a game mod (like a Minecraft modpack), or a fake Robux generator.
• Token Stealing: Once executed on your PC, the malware scrapes your browser data and steals your active Discord "session token". This allows the hacker to log into your account directly from their device, completely bypassing your password and Two-Factor Authentication (2FA).
• The Automated Spam: The compromised account instantly begins blasting the MrBeast giveaway images and scam links to your friends and servers.
• The Financial Trap: If your friends click the link, they are taken to a slick, fake gambling site. To withdraw their "winnings," the site demands up-front cryptocurrency deposits, "verification fees," or identity verification, stealing thousands of dollars from the victim.

Immediate Recovery Steps

If your account is currently sending these messages, the malware has likely stolen passwords saved in your browser alongside your session data. Take these exact steps from a clean device (like your phone) to secure yourself:

1. Disconnect the infected PC: Unplug its internet connection immediately to stop the malware from transmitting more stolen data.
2. Change your passwords: From your clean device, change your email password first, followed by your Discord password. Changing your Discord password forces an invalidation of all existing session tokens, instantly booting the hacker out.
3. Revoke authorized apps: Go to Discord User Settings > Authorized Apps, and delete any applications or bots you do not explicitly recognize.
4. Log out of other sessions: Go to Discord User Settings > Devices, and log out of all unknown or suspicious active sessions.
5. Clean your computer: Before logging back into any sensitive accounts on the infected PC, run a full system scan using a reputable anti-malware tool to locate and delete the infostealer. Avoid repeatedly resetting passwords on a machine that is actively compromised.