{"success":true,"data":{"id":"fake-discord-nitro-gift-account-phish","label":"Fake Discord Nitro gift or account compromised phishing — fraudulent email impersonating Discord claiming the recipient has been selected for a free Nitro subscription gift, their account has been compromised, or their account has been suspended — directing them to click a link to claim the Nitro gift, verify their account token, or appeal the suspension — a credential-harvesting phishing attack heavily targeting gamers, teenagers, and young adults in Discord's massive user base","description":"Phishing emails impersonating Discord — claiming the recipient has been selected for a free Discord Nitro subscription gift, their account has been compromised, their account token has been stolen, or their account has been suspended for a terms of service violation — then directing them to click a link to claim the Nitro gift, verify their account token, or appeal the suspension through a fraudulent credential-harvesting portal. Discord phishing is the dominant attack vector in gaming communities and among younger users. Key facts: (1) Discord Nitro gift scams are one of the most common phishing attacks targeting people aged 13–25 — the Discord user base (600M+ registered, 150M+ monthly active) is predominantly younger users who are statistically more susceptible to urgency and free-gift social engineering; Nitro gift phishing surged dramatically 2021–2024, with Discord itself issuing multiple security advisories; (2) Discord account token theft is highly damaging — a Discord token provides persistent session access without needing the password, enabling account takeover for bot abuse, server raiding, and selling compromised accounts on dark web markets ($5–$50 per account); (3) The \"free Nitro\" lure is uniquely effective because Discord does genuinely send free Nitro gifts through partnerships (e.g., with gaming platforms) — creating genuine uncertainty about whether a gift notification is real; (4) Legitimate Discord Nitro gifts are claimed through the Discord app itself or discord.com — never through external third-party links sent via email. Warning signs: non-discord.com/discordapp.com sender domain, free Nitro or account security urgency with external link, request for account token or Discord password.","tier":"danger","category":"phishing","isThin":false}}