'I accidentally reported you': the fake report scam

Why one mistaken report does not lead to a ban

Platforms receive huge numbers of reports, and moderation teams look at the reported content and behaviour, not simply the number of clicks on a report button. A friend telling you they reported you by accident is not a reason for an automatic ban, and nobody needs to 'reverse' it for you through a direct message.

If a platform does take action against your account, you will normally see it inside the app or receive an official notice, and any appeal goes through the platform's own help site. Discord's safety guidance is clear that staff will never ask for your password through direct messages.

If you want peace of mind, you can check your account standing yourself. Many platforms show warnings, restrictions or strikes in a safety or account standing section of settings, or send them by email to the address on the account. If nothing is there, there is nothing to fix.

It also helps to know that platforms do not resolve moderation cases through a stranger who adds you as a friend. Appeals are made through forms on the official help site, where you are already signed in and the platform can confirm who you are without asking for your codes.

The fake staff member's script

Once you add the 'staff' account, the conversation follows a pattern. They may show a fake case number or a convincing screenshot of an internal tool. Then come the requests, which escalate:

1. Confirm your email address and username.
2. Read out the code you are about to receive (this is them trying to sign in or reset your password).
3. Scan a QR code to 'verify your device' (this signs them in, see our page on QR code login scams).
4. Screen-share your settings or payment page.
5. Pay a fee or buy a gift card to 'clear' the report.

Any one of these is enough to end the conversation.

When the warning comes from someone you know

This scam spreads through stolen accounts. The friend who messaged you may have no idea it happened. The attacker sends the story to every contact because a familiar name lowers people's guard.

Before replying in the app, reach your friend through something else: a text, a call, or in person. If they did not send it, they need to start recovery now. Point them to our hacked account triage, and suggest they post a short warning to friends once they are back in control.

If you did fall for it and your account is now sending the message to others, act quickly. Each minute it stays in the attacker's hands, more of your friends are being targeted with your name.

Strengthening your account against the next attempt

This scam relies on you handing over something the attacker cannot get alone. A few settings make that harder:

• Use an authenticator app for 2-step verification rather than text messages, which Discord notes can be intercepted.
• Keep your email account protected with a strong, separate password and its own 2-step verification, as the NCSC recommends.
• Limit who can send you direct messages and friend requests in privacy settings.
• Save your backup codes somewhere safe and offline.

Together, these steps mean that even a convincing fake staff member has nothing useful to ask you for, and any attempt to sign in as you will show up as an alert you can act on straight away.

Helping a worried child through it

Children are especially likely to panic when told they will be banned. Reassure them that bans do not work like this and that talking to you was the right move. Then check the account together through the official app and go through the steps above if anything was shared.

Our parents' guide explains how to limit messages from strangers on each platform.

Variations on the same story

The 'accidental report' is the most familiar version, but the same structure turns up with different details. You may see:

• 'Your account was flagged for selling items, contact this moderator to appeal.'
• 'Someone used your payment card on my account, the admin needs to verify you.'
• 'You've been entered into a staff investigation, join this server within an hour.'
• 'Your account was linked to a hacked account, prove you are the owner.'

Each one has the same three parts: a threat to your account, a short deadline, and a named person or server to contact. Once you spot the pattern, the details stop mattering. Close the conversation and check your account through the official app.

If the message came from a stranger rather than a friend, you can also tighten your privacy settings so people you do not know cannot send you direct messages or friend requests. That cuts off most of these attempts before they reach you.