Your Discord was taken. Here's the next hour.

Does this look familiar

• Your account is messaging friends and servers with "free Nitro" or crypto links
• You're logged out and the password doesn't work
• Email or phone on the account changed
• Your server lost admins or gained bots you didn't add
• Someone "accidentally reported" you and asked you to talk to a "Discord admin"

Do these, in order

1. Email and carrier first

   Before touching Discord: from a clean device, change your email password, enable app-based two-factor, sign out of all sessions, and check recovery options. Call your carrier for an account PIN and port-freeze. Full first hour.

2. Reset your password from the login screen. If the email was changed, Discord sends a notification to the old address with a link to revert it; check that inbox, including spam.

3. Once in: User Settings → Devices. Log out of all other devices. Then Authorized Apps: deauthorize everything you don't recognize.

4. Enable two-factor with an authenticator app, save the backup codes somewhere real, and change the password anywhere it was reused.

5. If you run a server: Server Settings → Audit Log shows what the attacker did. Remove unknown roles, bots and webhooks, restore permissions, and tell your members.

6. If you can't get in, submit a request under "Hacked account" with the account's original email and username. One careful request beats five rushed ones.