---
title: "Phishing Links, Fake Nitro Scams & Mirror Pages"
description: "Rules against fake login screens, deceptive Nitro gift domains, and malicious QR code authorization exploits."
---

## Directive Objective
Eliminate deceptive phishing links, cloned authentication pages, and social engineering lures designed to hijack user accounts or credentials.

---

## 1. Scope and Policy Coverage
This directive strictly prohibits:
- **Typosquatting & Mirror Domains**: Links imitating official Discord URLs with subtle misspellings (e.g., `discorcl.gift`, `dlscord-app.info`, `discordnitro.site`).
- **Fake Nitro Gift Lures**: Automated bots or compromised accounts posting messages claiming *"Free Discord Nitro 3 Months from Steam!"* or similar bait.
- **Malicious QR Code Scams**: Persuading users to scan a QR code using the Discord mobile app under the guise of "verification," which actually authorizes an attacker's remote login.
- **Fake Steam / Tournament Phishing**: Directing users to fake Steam Community login pages claiming to vote for an esports team.

---

## 2. Exclusion Boundaries and Scope Limits
- **Broken / Expired URLs**: Legitimate websites that return 404 errors or have temporary SSL certificate expiration warnings without deceptive fraudulent intent.
- **Official Discord Promotions**: Official links hosted on `discord.com`, `discord.gg`, or verified partner platforms.

---

## 3. AutoMod Rule Recommendation
Implement regex filters to intercept common fake Nitro patterns:

```
(?i)(discord[a-z0-9\-]*\.(gift|info|site|ru|click|top))
```

Configure AutoMod to **Block Message**, **Timeout User for 1 Hour**, and **Alert Staff**.