EN
A new wave of Discord scams using the name of popular YouTuber MrBeast is targeting users through fake cryptocurrency giveaways, casino rewards, and promotional offers. However, unlike traditional giveaway scams where victims simply receive fake messages, this campaign involves a more dangerous method: hackers use information stealing malware to take control of Discord accounts and use them to spread scams to friends, servers, and contacts.
The scam falsely claims that MrBeast is giving away thousands of dollars, such as $2,500 rewards, free platform credits, or promotional bonuses. Messages are often sent from compromised Discord accounts, making them appear more trustworthy because they come from someone the victim may already know.
In this article, we explain how the Discord MrBeast scam works, how hackers gain access to accounts, and what steps users should take if they become victims.
The Discord MrBeast scam is a coordinated cyberattack that combines malware infections, account hijacking, and fake giveaway campaigns.
Instead of directly breaking into Discord accounts by guessing passwords, attackers usually trick users into downloading malicious files disguised as legitimate software, games, mods, or tools.
Common examples include:
Once the malware is installed, it can steal sensitive browser data and Discord account information.
Initial Infection-Hidden Infostealer Malware: The attack often starts when users download a file from an untrusted source. The file may look harmless, but it contains an information-stealing malware known as an Infostealer.
The malware secretly runs in the background and collects sensitive information stored on the victim’s computer.
This may include:
One of the most dangerous parts of this scam is the theft of Discord session tokens. A session token allows Discord to recognize an already logged-in user. Hackers can use a stolen token to access an account from another device without needing the victim’s password.
This means attackers may bypass normal login protections, including two-factor authentication (2FA), because they are using an active authenticated session.
After gaining access, hackers use the stolen Discord account to automatically send scam messages to:
Because these messages come from real accounts, victims may be more likely to trust them. The messages often include fake claims such as:
They usually contain images, promotional codes, or links leading to scam websites.
The scam does not end with account theft. When users click the scam link, they may be redirected to fake gambling, casino, or cryptocurrency websites that appear professional.
These websites may claim users have won money or credits. However, to withdraw the fake winnings, victims are asked to provide:
After sending money or information, victims receive nothing in return.
This scam is especially effective because it combines several techniques:
The use of compromised accounts makes this scam more convincing than ordinary spam messages.
Be careful if you notice:
Never download unknown files just because they promise free rewards.
If your Discord account is sending MrBeast giveaway messages without your permission, your computer may be infected with malware.
Follow these steps:
Disconnect the Infected Device:
Immediately disconnect the affected computer from the internet to prevent the malware from sending more stolen information.
Change Passwords From a Clean Device:
Use another trusted device, such as your phone, to change:
Changing your Discord password will invalidate existing sessions and remove the hacker’s access.
Remove Suspicious Authorized Apps:
Check Discord settings and remove any applications, bots, or integrations you do not recognize.
Review Active Sessions:
Check your Discord devices and log out of unknown sessions.
Scan and Clean Your Computer:
Before logging back into important accounts on the infected computer, run a complete malware scan using a reputable security tool.
Avoid repeatedly changing passwords while using a compromised device because attackers may steal the new credentials again.
To reduce your risk:
The Discord MrBeast scam is not just a simple fake giveaway scheme. It is a sophisticated attack that combines malware, account hijacking, and social engineering to target Discord users.
By stealing Discord session tokens, attackers can take control of accounts and use them to spread fake cryptocurrency and casino promotions to other people. This makes the scam more dangerous because victims often trust messages coming from friends or familiar communities.
Always remember that real giveaways do not require you to download unknown software, pay verification fees, send cryptocurrency, or provide account access.
This article has been written by a Scam Fighter Contributor, De-Reviews.com Team. If you believe the article above contains inaccuracies or needs to include relevant information, please contact ScamAdviser.com using this form.
De-Reviews.com Team is a group of scam researchers, editors, and online safety advocates dedicated to exposing online fraud and helping consumers stay safe online. The team has been investigating scams, fraudulent websites, phishing campaigns, and other online threats since 2014. Read the Full Author Profile.
