Skip to content
DiscordCatalog

MrBeast Crypto Messages on Discord: What to Do If Your Account Sends Them

If your Discord account is sending MrBeast crypto or casino messages you did not write, treat it as suspected account compromise. Open Discord independently and start recovery; you do not need to identify the malware or explain how it happened first. Deleting the messages alone does not secure the account.

RaidProtect's report on May 2026 describes fake MrBeast crypto and casino images spreading through accounts it classified as compromised. The familiar name is the lure; the message does not tell you how a particular account was accessed.

If a friend reports messages from your account, check the conversation in Discord itself. A copied display name or forwarded screenshot alone cannot confirm which account sent them.

Secure the account that is sending messages

Use a trusted device if you suspect an infected one

If you ran a downloaded file, installed an extension or executed commands from a suspicious message, stop entering passwords on that device. Use another device you have reason to trust for urgent recovery. The FTC's malware guidance explains how to update security software, scan and remove detected threats, and get help from the device manufacturer or a trusted professional.

A password reset does not remove malicious software. One clean scan does not prove that a device is clean. But the words “MrBeast giveaway” alone do not diagnose an infection either.

Continue with the branch that fits: I can still log in or I cannot log in / my email changed.

Recover access if you cannot log in

If your Discord email was changed: check your original inbox for Discord's email-change notification. Its Start Account Recovery link expires after 48 hours. Discord says the recovery URL starts with https://discord.com/wasntme/; keep the unique link private. The process removes the previous multi-factor authentication (MFA) configuration, so set up MFA again afterward. Follow Discord's email-change recovery instructions.

If the email is unchanged but the password no longer works: open Discord's login screen yourself, enter your email and select Forgot your password? Follow the reset email you requested. MFA may still be required. See Discord's password-reset instructions.

If either route fails, go to Discord Support. You do not need a working Discord app login to create the separate Help Center account.

Reset credentials and remove unwanted access

If you still have access, change your password to one you do not use elsewhere. On desktop, use User Settings → My Account → Change Password; on mobile, open settings, then Account → Password.

Then follow Discord's compromised-account guidance:

  1. Check that multi-factor authentication (MFA) is enabled. Follow Discord's setup guide if you need to enable it or restore it after recovery. Save the backup codes privately so you can recover access if you lose your authentication device.
  2. Review User Settings → Authorized Apps. On desktop, choose Deauthorize for unwanted apps; on mobile, remove them with the x control.
  3. Check your inbox for an unauthorized email-change notice if you have not already done so.

App access and password access are separate. Removing an app does not show that it caused the spam, and an empty app list does not establish that the account is secure.

Protect the recovery email too. If you find unfamiliar recovery details or forwarding rules, use your email provider's account-security instructions to remove them, change the password and enable MFA. If you cannot access the inbox, use its recovery route first; Discord reset emails will not help until you regain control. The FTC's recovery guide links to providers.

Warn contacts and clean up the messages

Warn affected friends through another established contact method, or through Discord after regaining control. Omit the scam link. For example:

The MrBeast crypto or casino messages sent from my Discord account were not written by me. Please do not open their links, download anything or send money. I am securing the account. If you already interacted, check the account or payment service you used through its official app or website.

Keep useful message details for your account-compromise support ticket, then remove the spam. You can delete messages sent from your account in conversations you can still access. Use the message menu's Delete Message option. If Report Message is available, you can also report the content; its absence need not delay cleanup. For server posts you cannot remove, ask the moderators for help; they need the relevant message-management permissions.

Cleaning up reduces the chance that someone follows an old link. It is separate from regaining control of the account.

Get help if recovery fails or new messages appear

First check the timestamp: a friend may be reporting an old message or forwarding a screenshot. New messages sent after your recovery attempt mean the problem still needs attention. Save an example and note when you changed the password, checked apps and addressed the device. Revisit the recovery email's security as well.

Use Discord's compromised-account support form. If it asks you to sign in, that is a Discord Support / Help Center account, separate from the account in the Discord app. First-time users can choose Sign Up and activate it by email. Discord explains this in its support-ticket instructions.

Describe the unauthorized messages, when they appeared, which recovery steps you tried, and any errors. Add new evidence to the existing ticket instead of opening repeated tickets. If suspicious software or device behavior persists, seek the device manufacturer's support or a trusted technical professional too.

Do not give a supposed Discord helper your password, authentication codes or recovery link. Discord says its staff do not initiate support conversations through the Discord app.

If you only received a MrBeast message

Do not use its link to log in, download a file or claim money. If it came from someone you know, ask them through another established contact method whether they sent it. Receiving the message alone is not evidence that your own account has been taken over.

A message from an old friend can carry someone else's promotion if their account has been accessed without permission. The sender's familiar name does not verify the offer.

Fictional example: a message shows what looks like a MrBeast announcement, offers a crypto bonus and gives a claim code. The linked site displays a balance, then asks for a deposit to unlock withdrawal. The FTC describes this prize-fee pattern: the supposed win becomes a reason to request your money or financial information.

To check a claimed announcement, go independently to the creator's established channels and look for the original post and its terms. Do not use a screenshot, copied profile photo or link supplied by the sender as the confirmation. If you cannot verify the original announcement, leave the claim unfinished. Do not pay a fee to release a supposed prize.

If you clicked something and are not sure what happened

Do not reopen the suspicious page or approve another request to reconstruct the steps. If you also ran suspicious software or commands, use the trusted-device instructions before entering replacement credentials. Use what you remember and what your own account shows:

Still cannot identify the confirmation? Look for the app name in a screenshot or notification you already have. Check your Discord account-change emails and open Authorized Apps directly; if a wallet opened, inspect its available request or activity details. Note the time and what appeared on screen, without sharing passwords, codes or wallet secrets. None of these checks alone proves that no access was granted.

If the confirmation may have granted access to Discord, describe it through Discord's support route. For a wallet, use the wallet provider's official support; for another identifiable app, use that app's help. If you cannot identify even the app, ask your device manufacturer's support or a trusted technical professional to help review the available clues. No support team can be assumed to reconstruct every unknown prompt. If your Discord account is already sending messages you did not write, take the account-recovery route without waiting to settle the cause.

If you paid or used a crypto wallet

Stop sending money, including additional “verification,” withdrawal or recovery fees. Contact the real bank, card issuer, payment app or exchange you used through its own app or website and ask what assistance is available. The FTC's payment-response guide separates these routes; contacting a provider does not guarantee a refund.

If you exposed a wallet recovery phrase or private key, or assets moved without your approval, address the remaining assets before treating this as reporting only. For MetaMask, use its compromised-wallet instructions; for another wallet, use that provider's official support. A disclosed phrase needs a new wallet secret, not just a new app password. If incoming funds disappear automatically, do not top up the wallet for network fees: a sweeper may take those funds too.

If you only remember confirming a wallet request, stop signing and collect any details already available in the wallet. Ask official wallet support to help identify the permission. MetaMask explains that some signed permissions can be used later without an immediate blockchain transaction. No fee or empty transaction history is not enough to declare the request harmless.

Report the message and keep the useful details

In Discord, right-click a message on desktop or press and hold on mobile → Report Message, then choose the relevant violation. Discord's reporting instructions also explain how to copy a message link. Reporting the content does not recover your account; use the support form for that.

Keep the message link, approximate time, relevant screenshots and website address. If you paid, also keep the payment receipt or transaction hash, network, asset, amount and destination address. Share relevant evidence with official support or your local fraud-reporting authority, without passwords, wallet secrets or private recovery links.

Avoid unsolicited services promising to recover the money for another payment. The FBI's cryptocurrency-victim guidance warns that these can be a second scam.

Published