Discord Account Disabled? Hacked or Suspended, What to Do

You were in a voice call or scrolling a server, Discord logged you out everywhere, and now the login screen or an email says "Your account has been disabled". Your friends, your servers and maybe years of messages sit behind that message.

The short answer: first work out why it was disabled. If Discord says it saw suspicious activity, it usually believes someone else had access, and setting a new password is the way back. If you broke a rule, the account is suspended and the appeal sits in the app under Standing. If someone stole the account, you report it through Discord's hacked account ticket.

This guide helps you tell the three apart, walks through each route, and lists the mistakes and scams that make things worse.

Last checked: 29 September 2026.

#What Does "Your Account Has Been Disabled" Mean on Discord?

It means Discord has switched off your access, either to protect the account or to enforce its rules. A notice that mentions suspicious activity and asks you to set a new password points to a suspected compromise, so reset the password from the link in the email and turn on two-factor authentication. A notice about a violation means a suspension, which you appeal from User Settings, My Account, Standing. If a stranger changed your password or email, submit a ticket at dis.gd/hackedaccount. Discord decides every case, and nobody outside Discord, including AwareXone, can restore the account for you.

#Which Kind of Disabled Account Do You Have?

Discord's help centre does not publish the full text of every notice, so the wording below comes from notices people have shared publicly and from Discord's own pages. It varies by app version, platform and region. Match on the key words, not the whole sentence.

#Disabled for Suspicious Activity: How to Get Back In

This is the version most people can fix themselves. Discord's page on spam and hacking says that if your account token has been compromised, you should reset your password to generate a new token. A token is the key that keeps you logged in; anyone holding it can use your account without the password. A new password cuts that key off.

1. Open the email from Discord on a device you trust. Check that the sender and link really are Discord before tapping anything.
2. Set a new, long password that you have never used anywhere else. Discord recommends a password manager.
3. If the reset link has expired, go to the Discord login page and use the forgotten password option with the email on the account.
4. Log in and turn on two-factor authentication straight away. Save the backup codes somewhere offline.
5. Open User Settings, then "Authorized Apps", and press "Deauthorize" on anything you do not recognise. Discord's hacked account page lists this step, and on mobile you remove apps with the x button.
6. If you use Windows, run a Windows Defender scan. Discord suggests it, because malware that steals tokens will simply steal the new one.

Then think about what caused it. Discord's pages point to reused passwords, fake "free Nitro" links and files, and people who talk you into sharing your login. Its spam page also says that using your token in any application, known as a selfbot, or any automation of your account may lead to suspension or termination. If you ran a bot client, plugin or script on your personal account, stop using it before you log back in.

#Suspended for Breaking the Rules: How the Appeal Works

A suspension is Discord's decision that the account broke its rules. Discord's post on its remediation approach says the standing meter has five levels: good, limited, very limited, at risk and banned. Penalties grow with repeat violations, from losing access for a month, to a year, and eventually for good. The most serious violations lead to an immediate ban.

Discord's page on appealing its actions sets out the route, and it runs inside the app:

1. Log in, if the app still lets you, and open User Settings.
2. Go to My Account, then "Standing".
3. Select the violation you want to appeal. You appeal one violation at a time.
4. Press "Let us know" and write your request for review.

Discord's Terms of Service add that any enforcement action, including suspensions and terminations, can also be appealed through a form on its support site. Residents of the European Union must appeal within six months; the Terms give no such window for Malaysia, so do not wait.

What happens next, according to the appeal page:

• Granted: Discord removes the violation, restores your standing and lifts the actions it caused. If you have other active violations, you may still not get full access.
• Denied: Discord sends you a message, and the violation stays until it expires, if it expires at all.
• Ineligible: some appeals cannot be reviewed because of the type of violation or because the information given was incomplete.

#If You Were Hacked Before the Account Was Disabled

This is the tangled case. Someone takes the account, uses it to spam or scam your friends, and Discord then disables it for what they did. The hacked account ticket comes first, because a review of a violation makes little sense while the attacker still holds the login.

1. Secure the email address on the Discord account: new password, two-factor authentication, and a check for forwarding rules you did not create. Whoever controls that inbox can reset Discord again.
2. Submit a ticket at dis.gd/hackedaccount, which opens Discord's support form for compromised accounts. Give the username, the email on the account, roughly when you lost control, and what changed.
3. If money moved, say so in the ticket. Discord asks you to include any unauthorised transactions.
4. If the account was also suspended for the attacker's messages, say that plainly in the ticket and, once you can log in, in your appeal from Standing.
5. Warn your friends and server members from another channel that messages from your account were not you. Our guide to a hacked account messaging your friends covers how to do that without spreading panic.

Be realistic about the odds. Discord's Terms say you are responsible for your account's security, and that if it is compromised or you lose the email or phone on it, Discord may not be able to restore your access or your servers. The hacked account page repeats that Discord may be unable to help if the account was not secured.

One billing trap: the same page warns that filing a chargeback with your bank for Discord purchases may get the account suspended while Discord investigates. Report unauthorised charges in the ticket instead, and ask Discord's billing team for a refund.

#Evidence to Gather Before You Write to Discord

A clear, factual request is easier to review than an angry one. Collect these before you submit anything:

• Screenshots of every notice, email and Standing screen, with dates and times visible.
• Your username, the email address and phone number on the account, and roughly when you created it.
• Access to that email inbox, because Discord replies there.
• For a hack: the time you lost access, any "password changed" or "email changed" emails, and messages sent from your account that were not you.
• For billing: receipts for any Nitro or other purchases you did not make.
• A short draft of three or four calm sentences saying what happened and what you have already fixed, such as removing an unofficial client or changing a reused password.

#Mistakes That Keep a Discord Account Disabled

• Logging back in and starting the same selfbot, plugin or script. Discord's automated systems flag suspected automation, and repeat violations bring stronger penalties.
• Resetting the password but leaving an unknown app authorised or malware on your computer, so the new token is stolen too.
• Sending a burst of friend requests or joining dozens of servers straight after you get back in. Discord's spam page says it takes action against accounts that do this.
• Filing a bank chargeback for Discord purchases instead of reporting them in the ticket.
• Writing a vague or angry appeal. Discord says some appeals are ineligible because the information given was incomplete.
• Paying anyone who promises to unban the account.

#If You Paid a Scammer or Lost Money in Malaysia

Act on the money first. The government's NSRC 997 hotline page says to call 997 within 24 hours of discovering a scam so the authorities can try to block the transactions, then contact your bank and make a police report at the nearest station.

If the takeover came through a phishing link, a fake login page or malware, you can also report it to CyberSecurity Malaysia's Cyber999 incident response centre, which accepts reports by online form, email, phone and its mobile app. Then change the password on every other account that used the same password or email. If you are not sure the attacker is gone, our guide on what to do when someone logged into your account walks through the checks.

#Keeping the Account Safe Once You Are Back

Discord's advice on protecting against scams comes down to a few habits. Do not click links from strangers, do not run programs or paste code someone sends you, do not scan QR codes from people you cannot verify, and turn on two-factor authentication. Discord notes that with 2FA on, an attacker also needs a code to change your password. You can also limit who can DM you under User Settings, "Privacy & Safety".

If you are choosing between an authenticator app and SMS codes, our explainer on setting up two-factor authentication covers the trade-offs; the reasoning carries over to Discord. In Malaysia, a phone that suddenly shows "No service" while codes stop arriving can mean your number has been moved to another SIM, so call your carrier from another phone straight away.

#When Expert Recovery Help Makes Sense

Most disabled Discord accounts are handled with the steps above, and only Discord's own processes can restore one. A second opinion helps when a hack and a suspension are tangled together, when your appeal came back ineligible and you are unsure what was missing, or when the account runs a community or business you depend on. SocialSafe by AwareXone, our recovery service, looks at what happened and tells you honestly whether an official route is still open. Sometimes the answer is that you already have everything you need. The recovery hub explains how that review works, and our Trust Center sets out what we never ask for, starting with your password and codes.

#Frequently Asked Questions