Listen to the episode
TLDR
The false report scam is a pure social engineering attack targeting Reddit and Discord users. A stranger claims someone reported your account (or that they accidentally reported you), then sends a fake "official" email with a 12 hour...
How it works
The false report scam is a pure social engineering attack targeting Reddit and Discord users. A stranger claims someone reported your account (or that they accidentally reported you), then sends a fake "official" email with a 12 hour...
Red flags
- A stranger DMs you about a report involving your account
- legitimate platforms never ask users to contact each other this way. A screenshot email with formal language, a ticket number, and an urgent countdown to suspension, limited features, or a ban. You are asked to read back a login or recovery code to a "Reddit employee" on Discord
- real staff never request codes in DMs
What to do
- 1Stop the conversation immediately and do not share any code, even if it looks real. Verify any account status directly through the platform's official help or settings pages, not via links or people in chat. If you already shared a code, change your password, revoke active sessions, and enable two factor authentication right away
Source
malwarebytes
Source reviewed by Mythos Forensic Team
https://www.malwarebytes.com/blog/threat-intel/2026/07/how-the-reddit-and-discord-false-report-scam-steals-accountsFAQ
Is False report scam on Reddit and Discord: how scammers steal accounts with fake reports and verification codes a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
A stranger DMs you about a report involving your account; legitimate platforms never ask users to contact each other this way. A screenshot email with formal language, a ticket number, and an urgent countdown to suspension, limited features, or a ban. You are asked to read back a login or recovery code to a "Reddit employee" on Discord; real staff never request codes in DMs
What should I do first?
Stop the conversation immediately and do not share any code, even if it looks real. Verify any account status directly through the platform's official help or settings pages, not via links or people in chat. If you already shared a code, change your password, revoke active sessions, and enable two factor authentication right away
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.