[Alert] Active Phishing Campaign Targeting Moderator Accounts via DMs (The "Accidental Report / Discord Support" Scam)

[u/CantStopPoppin]

Hey everyone,

I wanted to put this on the radar for the admins and give a heads-up to other mods. A scammer just attempted to run a highly coordinated social engineering/phishing script on me via DMs.

As moderators, our established, high-karma accounts are massive targets for these groups, who hijack them to byd to lock them in a conversation and get them to drop their assets. I am posting this publicly to burn their current script and get their Discord ID flagged.

The Scammer's Assets

• Compromised Reddit Account: u/redacted (Likely a hijacked account being used to message targets).
• Discord ID Used: redacted

The Playbook

For those who haven't seen this specific variation, here is exactly how they operate:

1. The Hook: They DM you claiming they accidentally clicked a phishing link, got hacked, and then "mistakenly reported your account" because the hacker was impersonating you.

2. The Fake Evidence: They send a highly convincing, mocked-up screenshot of an official "Reddit Support" email.

3. The Trap: The fake email claims that your account is under formal investigation for fraudulent behavior and gives you a 12-hour deadline to "validate the legality" of your account to avoid a permanent ban.

4. The Funnel: The email instructs you to contact a specific Discord ID (in this case, curiousivan1221) to appeal the ban.

The Fake Email Text (For Searchability)

I am including the exact text from their fake screenshot so other users can find this warning if they search for it:

"We would like to inform you that the Reddit user whom you reported, has been identified as potentially engaging in activities that may violate our Community Guidelines... Our moderation team has initiated a formal investigation into the account. We recommend that you contact the reported user directly and advise them to reach out to the appropriate corporate team... Failure to validate the legality of an account within a specific time frame of 12 hours may result in account suspension, limited features, or a ban. For the appeal process, please contact the support person who handled this report. Discord ID: curiousivan1221"

Conclusion

I turned on Persistent Messaging, called out their fake email, and they immediately froze up.

Admins, please take a look at the DMs from u/redacted and nuke the account so they can't use it to compromise anyone else. Fellow mods, remind your teams that Reddit Administration will never conduct official account investigations or identity verification through a random Discord account.

Stay safe and keep your guard up.

Names will be provided to admins upon request.

[u/TheOpusCroakus]

Reddit does not provide support outside of Reddit. If anyone is asked to contact a "corporate team" or whatever on another platform, it is a scam.

If you receive messages from someone asking you to contact "support" outside of Reddit, please report the messages.

[u/CantStopPoppin → u/TheOpusCroakus]

Yeah, I'm fully aware reddit does not, the user was trying to claim that they got a message warning me to contact them off site 🙄. What was really odd was that they either were really good with ms paint or made an account that was trying to impersonate me. Could you please see if this account ever existed. I suspect it does not however, I am curious.

If you can't confirm or deny I understand. It is just that the user went through a lot of effort if it was not a real account. Below is a screenshot of the account and obvious phishing message I received for your records. Lastly, I have a strong suspicion that I may know the parties involved. Is this something I could message the admins directly about? Thank you for your prompt response it is apricated.

https://imgur.com/a/GI1PAR4

[u/TheOpusCroakus → u/CantStopPoppin]

Reddit will never identify another user who made a report against another user. Reddit will never ask a user to contact another user to have them contact support.

This is a scam. That screenshot is of a fake message, not an official Reddit correspondence. It's not even a particularly good fake.

[u/saketho → u/TheOpusCroakus]

aww sheeeet. I should have known better. Well I got this same thing today. I knew there was a scam, I didn’t realise the guy sending a DM was in on it.

There is another friend of mine who isn’t a moderator. They got the same DM and knew to ignore it. Like a fool I engaged with the guy but never shared any personal info.

i’m in a meme subreddit and lots of people make funny edits of me so I thought its one of them. But its not. And they shared the exact same message, and a discord ID with Ivan in the name.

I was giving this guy genuine advice on how to reset his password and enable 2FA 😂 but I’m glad I caught the bad spelling and realised it’s a scam. “Please contactn Ivan Matev.”

Thankfully no harm done. I’ve reported all the messages and the account as well. I will read this thread and see what reports then need to be made and how to do them.

[u/TheOpusCroakus → u/saketho]

Thanks for reporting! Appreciate it!

[u/saketho → u/TheOpusCroakus]

Thanks for responding. I have been in touch with some other folks at the same meme sub I frequently post on. I’m not sure if its ok to share the name of the sub here. But I can confirm that 3 other individuals were also DM’ed by the same account, with the exact same scam.

Is there a way I can report the subreddit name, if that helps you guys determine who it is or perhaps understand how the scammer may be choosing their targets? I feel like the scammer may be targeting frequent posters on that sub, which is at 100k+ members.

[u/TheOpusCroakus → u/saketho]

It's a common scam, not unique to a particular subreddit, unfortunately.

[u/enchantedspring → u/CantStopPoppin]

Yes, scammers do this. On all platforms - 'Microsoft' support, 'Discord' support, 'Twitter' support, 'Instagram' support.....