Nothing Comes for Free, Unless it really is …

I’ll share an incident, a phishing scam I faced recently that I’d want people to be aware of .

We know, Discord is a popular social platform, and a lot of us folks spend quality time there doing a variety of things, not to mention gaming, streaming, hanging out with buddies and a lot more. So was I.

Suddenly saw an inbox notification popped up on my face that says the following -

Ahhmm 0_0

A random DM from a bot account that claimed I won a prize, and lets me pick one option from “Robux 10$” & “Nitro”. Okay, that’s great but is it really though?

So few things I followed up quickly →

• Check the Bot’s profile and other related information (mutual servers and stuffs)
• Inspect the URL without really doing the desired action that it expects.

And here’s what I found out →

• The bot was from a mutual server (a friend’s server where sometimes really weird things happened). But to my surprise, as soon as it did it’s job, i.e. sending me the above spoofed texts, it left the server and had nothing in mutual afterwards. Had I not seen it on time , I’d have no clue for it’s origin. And a couple of weeks later now, its profile photo also changed to some random crypto looking thingy (see below).
• The image bound with the claim button is totally out of date, as discord nitros can’t be expiring at a time in the past. It’s fishy and obvious. Says the gift expires on 25th when the text itself landed on 29th (lol there).

Expired Image LoL

• Now comes the desired action it expects. The click on the button that takes you to —
  https://discord.com/api/oauth2/authorize?client_id=<REDACTED_USER_ID>&permissions=8&scope=bot
  Damn, is that asking me to authorize the bot to access my account ? Yeah it is. So does its about says too.

Damn, Data Access :0

So had I falled for this trick, it would do its weird stuffs without actually doing what it claimed initally.

You see, claiming a Discord Nitro gift is totally different way of occurance.
Like if I send a Nitro gift to someone for real, it’d be like this —

Don’t worry, the gift is already claimed ;)

And the end-user receiving the actual gift, would get something like this —

Credit — Discord support

And the recipent would get a full, proper pop up like this —

Credit — Discord support

More on how to claim Discord Nitro here—

Claiming a Nitro Gift FAQ

Also, this guy on YouTube, No Text To Speech explained very nicely how these kinda scams work. Check it out below —

So, hope you guys be aware of things like these around. Till then, adios.