Hi everyone,
Im posting here because I'm running out of options and would really appreciate advice from anyone who has experienced something similar or successfully recovered a compromised Discord account.
On October 16, 2026, my Discord account was compromised after I clicked a malicious link. I suspect the attacker may have obtained access to my session or login credentials, although I cannot confirm exactly how the compromise occurred.
The attacker changed my account's email address and password and interfered with my security settings, including two-factor authentication (2FA). I had Google Authenticator enabled and my phone number associated with the account, but the authentication codes are no longer accepted.
At one point, I managed to change my password, only for the attacker to change my credentials again shortly afterward.
## I still have evidence that I am the legitimate owner
I have recovered access to the original email account associated with my Discord account, and I still control my original phone number.
I also have Discord Nitro payment records, the original Discord notification about the email address change, screenshots documenting the incident, and access to linked accounts such as Steam, Spotify, PlayStation Network, and Battle.net.
In addition, I have evidence of extortion attempts, messages allegedly acknowledging the account theft, payment details associated with ransom demands, and threats
I have filed a police report with the Police
Despite these circumstances and the evidence I can provide, I have not been able to recover my Discord account.
## My experience with Discord Support
I opened a support ticket and explained what happened. Initially, support told me that they could only proceed if I submitted a ticket using the original email address associated with the account.
The problem was that I was not receiving the expected Discord emails, and I could not complete the standard recovery process. I also explained that my Google Authenticator codes were being rejected and asked whether Discord could temporarily lock or restrict the compromised account to prevent further abuse.
One support representative asked me for more information about the email delivery issue. After I explained the authentication problems and provided screenshots, another response stated that my case had been forwarded for further review.
I was relieved because I thought someone might finally investigate the situation.
However, other support requests have been marked as **"Solved" within a few hours**, even though my account has not been recovered and the underlying problem remains unresolved.
Some responses have simply directed me back to the standard recovery process, which I have been struggling to complete because of the changes made during the account takeover.
I have also been told not to submit multiple reports about the same issue, so I am trying to continue through the existing ticket rather than create unnecessary duplicates.
## Why I'm so concerned
My account appears to remain active, and the unauthorized person has been contacting my friends while impersonating me.
I have approximately 900 friends on the account, and I am worried that they could be targeted by scams, fraudulent requests for money, or malicious links sent by someone pretending to be me.
This is not simply about losing access to a gaming account. Someone else appears to be using my identity to interact with people who know and trust me.
I understand that Discord must verify account ownership before restoring access. I'm not asking them to bypass their security procedures. I'm asking whether an alternative, human-reviewed verification process is possible when an attacker has changed the account's security settings and the standard recovery process is not working.
I would also like Discord to assess whether a temporary protective restriction could prevent further impersonation while ownership is being investigated.
## Has anyone experienced something similar?
I'd really appreciate advice from people who have dealt with a similar situation.
- Has anyone successfully recovered a Discord account after an attacker changed the email address, password, and 2FA settings?
- Did Discord Support accept alternative proof of ownership, such as Nitro payment records, access to the original email account and phone number, or other documentation?
- If a support ticket is marked "Solved" without actually resolving the problem, is there a legitimate way to request another review without creating duplicate tickets?
- Is there anything else I can do to protect my contacts and improve my chances of recovering the account while the investigation is ongoing?
