Most account compromises on Discord start with a link someone should not have clicked. Scammers exploit urgency — free Nitro, "staff verification," account suspension, crypto giveaways — to rush you past common sense.
Real Discord staff will not DM you asking for your password or verification codes. Nitro gifts arrive through Discord's own gift interface, not random login pages. If a link URL does not match discord.com or discord.gg when you inspect it, treat it as hostile.
Enable two-factor authentication so a stolen password alone is not enough to take your account. Review Authorized Apps and remove anything you do not recognise.
If you clicked something suspicious, change your password immediately, regenerate 2FA backup codes if needed, and scan your device for malware. Report the user to Discord and, if they came from The English Hub, report-help with IDs and screenshots.
Never forward scam links "for laughs" — someone in your contacts will click them.