In short, a kid made a Discord account at age 12, lied about her age and said she was 18. The kid at age 13 clicked a scam link claiming to be Discord support and lost access to her account. Scammer asked for parents bank account details which is how the dad became aware. Dad tried to report the issue to Discord, but had to go through an AI support bot that kept closing the ticket. Dad spoke with someone named “Molly” that was possibly a human and explained that his daughter’s account had a lot of underage friends tied to the account that could be at risk. “Molly” said they’d have to open a ticket from within the app, which they no longer had access to because his daughter never set up 2FA.

Discord didn’t actually do anything about this until Ars stepped in. After regaining access to the account the daughter found 2 friends fell for the scam. Discord later banned the account for violating the TOS when lying about her age and stated they would only restore the account if they shared a photo of the kid along with a copy of her birth certificate or passport. The father gave in and complied so she didn’t lose access to her friends.

other discussions
 

"Brady Frey did not realize that his daughter lied about her age when she set up her Discord account. He only found out after her account got hacked and he got trapped in a spiraling support nightmare while trying to stop the hacker from targeting dozens of her young friends with financial extortion scams.

When Frey’s daughter signed up for Discord, she was 12 and technically not old enough to have an account. But like many kids who, regulators have found, commonly lie about their age to access social media platforms, she didn’t want to wait another year to join her friends on the messaging app. Hiding her age, she created an account that listed her as over 18 years old.

Now 13, the teen had been happily using the app for months when she suddenly got locked out of her account after clicking on a link from an attacker posing as Discord support. Since she didn’t enable two-factor authentication, the attacker was able to commandeer the account. Frey only found out what was happening when the attacker asked the teen to share her parents’ banking information if she wanted to get her account back.

Once Frey realized his daughter had been hacked, he assumed that Discord would promptly intervene, recognizing that many minor victims on her friends list could be harmed the longer the attacker kept control. Instead, Discord’s chatbot, Clyde, and a seeming human support member, Nelly, automatically closed her support tickets after telling her it would be best to report the issue from inside the app, which she could not access.

Frey told Ars he was shocked to see a platform as big as Discord relying on such poor support infrastructure.

“There’s no pathway for a parent to step in and advocate for a minor whose account has been compromised,” Frey told Ars."

Everyone laugh at Discord AI moderation

 

Data dump confirms dad's suspicions that Discord knew teen's age prior to hack.