Malware Popups on Discord
Discord users are targeted with malicious links in DMs and server messages that open browser popups mimicking antivirus alerts, directing them to download malware disguised as security tools.
Part of: Malware Popups
Last reviewed: 1 June 2026
Discord's link-sharing culture — where users regularly share downloads, streams, and external resources — creates an environment where malicious links blend easily with legitimate content. Malware popup links are frequently disguised as gaming mods, cheat tools, or free software offers, exploiting communities where such resources are commonly shared.
Younger users in gaming servers may be particularly susceptible because they are accustomed to clicking external links for game resources and may not apply the same caution they would to an unsolicited email.
How this scam works on Discord
A Discord DM or server post offers a free game mod, skin unlocker, or software tool. Clicking the link opens a website that immediately triggers a browser security alert claiming the device has a virus or that a critical update is required. A large download button or support phone number is presented as the only resolution.
Some variants use Discord's embeds to display a convincing preview that suggests a legitimate file download before redirecting to the malware page. Others use Discord bots to automatically DM members of large servers with the malicious link.
Gaming-specific variants may claim the browser alert is connected to the user's game account being hacked, adding a game-relevant urgency that increases the likelihood of action.
Common red flags
- Discord link that opens a browser security alert or antivirus warning
- Browser alert that prevents normal navigation and presents a download or support number
- Message offering a free game resource that redirects to a security alert page
- Discord bot DM with an unsolicited link described as a free tool or software
- Alert claiming your gaming account has been compromised and requiring immediate action
How to protect yourself
- Force-close your browser if a security alert popup appears after clicking a Discord link
- Be sceptical of links offering free mods, cheats, or software shared in Discord
- Do not download any file from a browser alert page
- Report the Discord account or server posting malicious links to Discord Trust & Safety
- Keep your browser and operating system updated to reduce drive-by-download risk
How to report it
- Right-click the account or message and select 'Report' to alert Discord Trust & Safety
- Report the server if it is systematically distributing malicious links
- Submit the URL to your national cybersecurity authority's malware reporting tool
Frequently asked questions
How can I check if a Discord link is safe before clicking it?
Hover over the link to see the full URL before clicking. Check the domain against known safe sources. You can also paste the URL into a link-safety checker such as VirusTotal before opening it. Be especially cautious of shortened URLs that do not reveal the destination domain.