Twitch & Discord Giveaway Scams
Fake giveaways on streaming platforms and community servers that steal credentials or harvest personal data.
Last reviewed: 1 June 2026
What this scam is
Twitch and Discord giveaway scams impersonate popular streamers, gaming personalities, or official platform accounts to promote fake prize draws. Winners are promised valuable gaming items, gift cards, subscriptions, or hardware — but the 'win' is used to steal credentials, install malware, or harvest personal and payment information.
Giveaways are a legitimate and common part of streaming and gaming culture. Streamers reward their communities, publishers run promotional events, and gaming communities hold raffles for their members. Scammers exploit this established behaviour by making their fake giveaways indistinguishable from the real thing at a glance.
The scam reaches players through multiple vectors: messages from compromised or impersonator accounts in Discord servers, fake notifications that mimic official platform announcements, posts on social media impersonating streamers, and direct messages informing players they have 'won' a prize they never entered.
Younger players are a significant target because they are active participants in these communities, familiar with giveaway culture, and may be less experienced in recognising impersonation. The appeal of winning something from a favourite content creator is a particularly effective hook. Parents and guardians of active gaming community members benefit from understanding how these scams are structured.
How it works
In Discord variants, the scam typically begins with a compromised server account — a bot account or a previously trusted user whose account was taken over — posting a giveaway announcement that appears to come from within the community. Alternatively, a user may receive a direct message claiming they were randomly selected to win a prize.
The message directs the player to a website or asks them to log in via a link to 'claim their prize'. The link leads to a fake OAuth authorisation page that looks like an official Discord or gaming platform login. Authorising the request does not verify a prize entry — it grants the scammer access to the player's account.
In Twitch variants, scammer bots flood stream chats with messages claiming the streamer is running a giveaway and directing viewers to an external site. These messages are designed to be posted at high volume during busy streams where individual moderation is difficult.
Some fake giveaways require personal information — name, address, date of birth, phone number — to 'process the prize', which is then used for identity fraud or sold to data brokers. Others direct winners to a payment page requiring a small 'shipping fee' or 'handling charge'.
Bot-driven variants can mimic the visual format of legitimate giveaway announcements precisely, including fake reaction counts and fabricated winner lists.
Why this scam works
Giveaways are commonplace in gaming communities, so the concept carries no inherent suspicion. Many players have genuinely won giveaways before, making the premise feel entirely plausible.
The impersonation of trusted figures — a streamer the player watches regularly, an official-looking platform notification — borrows pre-existing trust. When a message appears to come from a source you already believe in, your default assessment shifts towards acceptance.
For younger players especially, the excitement of potentially winning something from a favourite content creator can override careful evaluation. The 'you've been randomly selected' framing creates a sense of special selection that is emotionally engaging.
A typical pattern
A player in a gaming Discord server receives a direct message claiming they have been randomly selected to win a prize from the server's most recent giveaway event. The message includes the server's branding and appears to come from a moderator. Clicking the claim link opens a page that looks like Discord's login screen. The player authorises the application, which requests access to their account. Their Discord account is immediately used to send the same message to their contacts, spreading the scam further. Their account settings are also changed, locking them out.
Common red flags
- Unsolicited direct message informing you that you have won a giveaway
- Claim link requires logging in through an external site rather than the platform directly
- Request to pay a fee to claim a prize
- Giveaway announced by a newly joined account or bot in a server
- Sending account name slightly different from the streamer's or server's real accounts
- Legitimate giveaway cannot be verified on the streamer's official channels
- Request for personal details such as address or date of birth to receive the prize
- Extremely valuable prize offered with minimal entry requirements
- Message creates urgency — prize must be claimed within minutes
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Congratulations! You've been selected as a winner in [server] giveaway. Claim your prize: [fake link]
[Streamer name] is doing a massive giveaway! First 100 to sign up at [fake link] get free [item]!
Your account was randomly selected for a [platform] reward. Verify at [fake link] to receive it.
Hi! You won our Discord server giveaway. To claim your [item], log in to confirm here: [fake link]
LIVE GIVEAWAY — [streamer] giving away [gaming hardware]. Enter now at [fake link] — ends in 10 mins!
Prize: [gift card amount] gaming gift card. You entered last week — claim code at [fake link]
Common variations
- Discord DM scam — direct message claiming you won a server giveaway
- Twitch chat bot scam — bots post giveaway links in high-traffic stream chats
- OAuth authorisation harvest — fake login page captures Discord or platform access token
- Streamer impersonation — fake account mimics a popular streamer's giveaway
- Platform notification mimic — message designed to look like an official platform reward
- Data-harvest variant — requires personal details to 'process' the prize claim
How to verify before you act
Legitimate giveaways from streamers and gaming platforms are announced publicly on official channels — a streamer's own stream, their official social media accounts, or a platform's official announcements. A prize notification arriving by direct message from an account you do not follow is almost always fraudulent.
Check the sending account carefully. Discord usernames and display names can closely resemble each other, and impersonator accounts often add a single invisible character or use a similar-looking display name. Check the account creation date and server join date.
Legitimate prize claims never require logging in through an external link, paying a fee to receive a prize, or providing financial details to collect winnings. If any of these are required, the giveaway is a scam.
If a giveaway is announced in a Discord server, verify it in an announcement channel or by checking directly with a server moderator — not by responding to the direct message.
Payment methods used
- No direct payment — harm via account access, credential theft, or personal data harvest
- Some variants request a small 'processing fee' or 'shipping charge' for the prize
Who is usually targeted
- Active members of gaming Discord servers
- Viewers of popular gaming streamers
- Younger players familiar with giveaway culture
- Community members who have participated in previous legitimate giveaways
What to do immediately
- Do not click the claim link or authorise any application it requests
- If you already authorised an app, go to your Discord or platform settings and revoke its access immediately
- Change your account password if you entered it on an external site
- Enable two-factor authentication on your account if not already active
- Report the scam message to the platform and to the real server moderators
- Alert other community members so they can avoid the same message
- If personal details were provided, monitor for identity fraud activity
How to prevent it
- Enable two-factor authentication on all gaming platform and Discord accounts
- Never authorise external applications through links in unsolicited messages
- Verify any giveaway through the organiser's official public-facing channels
- Use parental controls to limit younger players' ability to authorise third-party apps
- Encourage younger players to check with a trusted adult before claiming any online prize
- Review and revoke third-party application authorisations on your accounts periodically
- Enable login alerts on your accounts so you are notified of new sign-ins
- Join official Discord servers only from links on verified official websites or platforms
Evidence to preserve
- Screenshot of the scam message and the sending account
- URL of the fake claim site
- Username and server of the sending account
- Any account changes that occurred after interaction
- Screenshot of any OAuth or app authorisation screen
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
How do I tell a real Discord giveaway from a scam?
Real giveaways are announced in public server channels by verified moderators or bots, not by unsolicited direct messages. You can verify a win by asking a server moderator directly or checking the server's announcement history.
I authorised an app in Discord and now my account is posting messages — what do I do?
Go to Discord's User Settings, then Authorised Apps, and revoke the suspicious application immediately. Change your password and enable two-factor authentication. If your account sent scam messages to others, let them know to ignore them.
Can streamers really give away expensive prizes?
Yes — legitimate giveaways happen regularly. The difference is that legitimate ones are announced publicly on the streamer's verified channels, not delivered by unsolicited direct message, and do not require external logins or fees to claim.
My child was asked for their address to receive a prize — should I be concerned?
Yes. Legitimate online prize draws for gaming items are almost always delivered digitally (code or in-game grant) and do not require a physical address from a child. Request for a physical address combined with date of birth is a pattern associated with identity data collection.
A message in a Discord server from a moderator-looking account is promoting a giveaway — is it safe?
Check the account's username and discriminator carefully against the real moderator's profile. Impersonator accounts often have identical display names but different usernames. Ask a verified moderator in the server's official help channel to confirm.
What is an OAuth scam?
OAuth (Open Authorisation) is the technology that lets you grant one application access to your account on another platform. Scammers create fake authorisation pages that look like official Discord or platform logins to trick you into granting access to your account, without ever taking your password directly.
How do I check which apps have access to my Discord account?
Go to Discord User Settings, then Authorised Apps. Review the list and revoke access for any application you do not recognise or no longer use.