Malware Popups on Discord
Discord users are targeted with malicious links in DMs and server messages that open browser popups mimicking antivirus alerts, directing them to download malware disguised as security tools.
Part of: Malware Popups
Last reviewed: 1 June 2026
Discord's link-sharing culture — where users regularly share downloads, streams, and external resources — creates an environment where malicious links blend easily with legitimate content. Malware popup links are frequently disguised as gaming mods, cheat tools, or free software offers, exploiting communities where such resources are commonly shared.
Younger users in gaming servers may be particularly susceptible because they are accustomed to clicking external links for game resources and may not apply the same caution they would to an unsolicited email.
How this scam works on Discord
A Discord DM or server post offers a free game mod, skin unlocker, or software tool. Clicking the link opens a website that immediately triggers a browser security alert claiming the device has a virus or that a critical update is required. A large download button or support phone number is presented as the only resolution.
Some variants use Discord's embeds to display a convincing preview that suggests a legitimate file download before redirecting to the malware page. Others use Discord bots to automatically DM members of large servers with the malicious link.
Gaming-specific variants may claim the browser alert is connected to the user's game account being hacked, adding a game-relevant urgency that increases the likelihood of action.
Common red flags
- Discord link that opens a browser security alert or antivirus warning
- Browser alert that prevents normal navigation and presents a download or support number
- Message offering a free game resource that redirects to a security alert page
- Discord bot DM with an unsolicited link described as a free tool or software
- Alert claiming your gaming account has been compromised and requiring immediate action
How to protect yourself
- Force-close your browser if a security alert popup appears after clicking a Discord link
- Be sceptical of links offering free mods, cheats, or software shared in Discord
- Do not download any file from a browser alert page
- Report the Discord account or server posting malicious links to Discord Trust & Safety
- Keep your browser and operating system updated to reduce drive-by-download risk
How to report it
- Right-click the account or message and select 'Report' to alert Discord Trust & Safety
- Report the server if it is systematically distributing malicious links
- Submit the URL to your national cybersecurity authority's malware reporting tool
Frequently asked questions
A Discord link promised a free game mod but triggered a virus warning instead — could the mod still be real, just poorly hosted?
It's very unlikely — legitimate mod and tool distribution doesn't route through browser pages that display urgent virus warnings and phone numbers. Treat the entire link as malicious, close the browser without downloading anything, and avoid similar links shared in the same channel or by the same account.
How can I check if a link shared in a Discord server is safe before I click it?
Hover over the link first to see its actual destination URL, and paste suspicious links into a link-checking tool such as VirusTotal before opening them. Be especially wary of shortened URLs that hide the real destination, and avoid links offering free mods, cheats, or paid software for free.
How can I check if a Discord link is safe before clicking it?
Hover over the link to see the full URL before clicking. Check the domain against known safe sources. You can also paste the URL into a link-safety checker such as VirusTotal before opening it. Be especially cautious of shortened URLs that do not reveal the destination domain.