A friend just messaged you on Discord: “Hey, MrBeast is giving away $500 on his new casino. Sign up before midnight!” The message has his face, a promo code, and a link. It looks real. It isn’t.
Your friend didn’t send that message. Their Discord account was hijacked by token-stealing malware. It’s now sending the same scam to every person on their contact list. The “casino” doesn’t exist. MrBeast has no gambling site. And if you follow the link, you’ll lose real money chasing a bonus that was never there.
Last reviewed: April 2026. Scam details verified against Graphika and Krebs on Security reporting.
What is Mr Beast Discord Scam?
The Mr Beast Discord Scam is a social engineering attack that impersonates the popular YouTuber MrBeast, falsely claiming to offer giveaways, rewards, or exclusive content. These scams are typically distributed via Discord servers, direct messages, or compromised accounts.
The attackers create convincing messages that appear to come from official sources, often including branding, profile images, and language similar to the real creator. Victims are encouraged to click on links that supposedly lead to reward pages, verification steps, or prize claims.
Mr Beast Discord Scam Short Overview
| Type | Social engineering scam, advance-fee fraud, account hijacking |
| Platforms affected | Over 1,200 fake casino domains identified (Krebs on Security, July 2025). |
| How accounts are compromised | Discord token stealers hidden in game cheats and free tools. |
| Financial risk | Victims reported losses of up to $4,000 through fake “verification deposits”. |
| Short Description | A suspicious website that steals data and causes redirects. |
| Symptoms | Unwanted pop-ups may start appearing while you are browsing the web. A browser hijacker may be downloaded without your knowledge. |
| Connection to Mr. Beast. | None. MrBeast has no casino, gambling site, or crypto giveaway |
| Removal Tool |
See If Your System Has Been Affected by malware
Download
Malware Removal Tool
|
What Is the MrBeast Discord Scam?
This isn’t a single phishing page. It’s a large-scale fraud operation that uses MrBeast’s name to lure Discord users into fake crypto casino sites. Security researchers at Graphika documented the campaign. Brian Krebs investigated it further after a 17-year-old researcher known as “Thereallo” uncovered over 1,200 connected scam domains.
Here’s how it operates on two levels. First, attackers compromise thousands of Discord accounts using token-stealing malware. Once compromised, those accounts automatically message every contact with scam links. It spreads fast because the messages appear to come from trusted friends.
Why MrBeast specifically? He’s known for large giveaways and recently launched a gaming business called Beast Games. Scammers exploit that brand recognition. “MrBeast is giving away money on his new casino” sounds plausible when you know his brand. That’s exactly what scammers are counting on.
To be clear: there is no MrBeast casino. There is no MrBeast crypto giveaway. Every site claiming otherwise is fraudulent.
How the Scam Works Step by Step
Every version of this scam follows a predictable pattern. Understanding each stage helps you spot it before you lose money.
Stage 1: The Message
You receive a Discord DM from someone you know. The message includes MrBeast’s photo, casino-style branding, and a “promo code” that supposedly gives you a $2,500 credit. The urgency is built in: “Sign up before midnight,” “Limited slots available,” “Exclusive for Discord members.”
The message feels legitimate because it comes from a real account you trust. Your friend isn’t sending it, though. Their account was hijacked, and the message is automated.
Stage 2: The Fake Casino Site
Click the link and you land on a polished website that looks like a real online casino. It has game lobbies, live chat, flashy graphics, and a working promo code field. Enter the code, and you’ll see a $2,500 “bonus” appear in your account balance.
Don’t underestimate how real these sites look. According to Krebs on Security, all 1,200+ scam domains share the same backend API and chatbot system. They even track users across sites using IP addresses and device fingerprints.
Stage 3: The “Verification” Deposit
Here’s the trap. To “withdraw” your bonus, the site asks for a small verification deposit. Usually around $100 in cryptocurrency. This sounds reasonable if you think you’re about to withdraw $2,500.
After you deposit, a new requirement appears. Maybe “identity verification” needs another $50. Or “processing fees” require $75 more. The goalposts keep moving. Every deposit triggers a new excuse for why you can’t withdraw yet.
This is a classic advance-fee scam. The $2,500 bonus never existed. There’s nothing to withdraw. Every dollar you deposit goes straight to the scammers.
Stage 4: The Endless Loop
Victims who realize they’ve been scammed sometimes try to “win back” their deposits by playing the site’s games. Don’t. The games aren’t real either. The outcomes are predetermined to keep you depositing. Some victims have reported losing up to $4,000 before walking away.
How Discord Accounts Get Hijacked
Scam messages come from real accounts. So how do attackers get access? In most cases, through Discord token stealers.
What Is a Discord Token?
Your Discord token is a string of characters that keeps you logged in. It’s stored locally on your device. If someone gets your token, they can access your account without your password and without triggering two-factor authentication. It’s like a copy of your house key.
How Tokens Get Stolen
By far the most common delivery method is game cheats and modding tools. Here’s how it typically works:
- You download a free cheat for Roblox, Fortnite, Minecraft, or another popular game
- The cheat works as advertised (at least partially)
- In the background, a hidden component scans your system for Discord tokens stored in browser local storage or the Discord client’s data files
- The token gets sent to the attacker’s C&C server
- The attacker now controls your Discord account and uses it to send scam messages to your entire contact list
You won’t know it happened immediately. Your Discord app keeps working normally on your end. You might only realize your account was hijacked when friends ask you about the weird casino message you “sent” them.
Other Ways Tokens Get Stolen
- Fake Discord bots that ask you to authorize permissions, then steal your token
- “Free Nitro” scams that link to phishing pages mimicking Discord’s login screen
- Malicious browser extensions that read Discord’s local storage from your browser
- Pirated software bundled with infostealers that harvest tokens alongside saved passwords
What to Do If You Encounter This Scam
If You Received the Message (But Didn’t Click)
You’re safe. Don’t click the link. Let your friend know their account has been compromised. They probably don’t know yet. Send them a message through a different channel (text, phone call, another platform) since their Discord DMs may still be sending scam messages.
If You Clicked the Link But Didn’t Deposit
You’re likely fine, but take precautions:
- Close the site and clear your browser data (cookies, cache, site data)
- If the site asked you to download anything, don’t run it. Delete the file
- If you entered your Discord credentials on the site, change your Discord password immediately and enable two-factor authentication
- Run a scan with your antivirus. SpyHunter 5 (Windows) or SpyHunter for Mac can detect token stealers and browser-based threats that may have been delivered through the scam page
If You Deposited Money
Unfortunately, cryptocurrency transactions are irreversible. But you should still take action:
- Stop depositing immediately. No amount of additional deposits will unlock a withdrawal. The bonus is fake
- Document everything: screenshot the site, the messages, transaction hashes, wallet addresses
- Report to your crypto exchange if you sent funds from an exchange wallet. Some exchanges can flag the receiving address
- File a report with the FBI’s IC3 (ic3.gov) if you’re in the US, or your country’s equivalent fraud reporting agency
- Report the scam to Discord through their Trust & Safety team
How to Recover a Hijacked Discord Account
If your account was used to send scam messages, here’s how to regain control and stop the spread.
Step 1: Change Your Password Immediately
Go to Discord’s settings (User Settings > My Account > Change Password). This invalidates all existing tokens, including the stolen one. The attacker loses access the moment you change your password.
If you can’t access your account, use Discord’s password reset via email.
Step 2: Enable Two-Factor Authentication
Go to User Settings > My Account > Enable Two-Factor Auth. Use an authenticator app (Google Authenticator, Authy, or similar). This adds a second barrier that tokens alone can’t bypass in the future.
Step 3: Review Authorized Apps and Sessions
- Go to User Settings > Authorized Apps. Remove anything you don’t recognize
- Go to User Settings > Devices. Log out of all sessions except your current one
Step 4: Find and Remove the Token Stealer
Important: the hijacking will happen again if the malware that stole your token is still on your machine.
- Think back: did you recently download any game cheats, mods, free tools, or “Nitro generators”? Delete them
- Check your browser extensions for anything unfamiliar and remove it
- Run a full system scan with your antivirus. Update definitions first
- Check common malware locations: %AppData%\Local\Temp, %AppData%\Roaming, and your Downloads folder
If you can’t identify the source, SpyHunter 5 can detect known token stealer families and the persistence mechanisms they use (registry entries, startup tasks). That’s useful when you’re not sure what installed the malware in the first place.
Step 5: Warn Your Contacts
Post a message in your Discord servers and DM close contacts on another platform. Let them know scam messages were sent from your account and not to click any links. The faster you do this, the fewer people fall for it.
System Cleanup (If You Downloaded Anything)
If the scam site prompted you to download a file and you ran it, treat your system as compromised.
- Boot into Safe Mode (Windows + I > System > Recovery > Advanced startup)
- Run a full antivirus scan with updated definitions
- Check Task Manager > Startup tab for unfamiliar entries
- Open Task Scheduler and look for recently created tasks with vague names
- Check your browsers for new extensions you didn’t install
- Change passwords for all accounts that were logged in on the affected device, not just Discord
Token stealers rarely travel alone. If one was on your system, your browser’s saved passwords and other tokens (Google, Steam, social media) may also be compromised.
How to Avoid Discord Scams Like This
- Never download game cheats. This is the number one way Discord tokens get stolen. No free Roblox exploit is worth losing your account (and potentially your money)
- No legitimate giveaway requires a deposit. Ever. If you have to pay to receive a prize, it’s a scam. This rule has zero exceptions
- Verify before clicking. If a friend sends you an unusual link, contact them through a different channel to confirm they actually sent it
- Enable 2FA on Discord. It won’t stop a token theft in progress, but it makes recovery easier and blocks some attack methods
- Don’t authorize unknown Discord bots. Bots that request excessive permissions can access account data they shouldn’t have
- Be skeptical of celebrity endorsements. MrBeast, Elon Musk, and other public figures are constantly impersonated in scams. Real giveaways happen on verified accounts and official channels, not random Discord DMs
- Check the URL. Scam casino sites use domains that sound vaguely related to the celebrity but aren’t official. If it’s not on MrBeast’s verified social accounts, it’s not his
Frequently Asked Questions
Is MrBeast actually affiliated with any casino or crypto giveaway?
No. MrBeast (Jimmy Donaldson) has no casino, no crypto giveaway, and no gambling site. He launched a gaming business called Beast Games, but it’s a legitimate entertainment venture with no connection to the scam sites. Every “MrBeast Casino” is fraudulent. He has publicly addressed these scams multiple times.
My friend sent me the scam message. Is their account hacked?
Almost certainly yes. Their Discord token was stolen, most likely through malware hidden in a game cheat or free tool. The scam messages are sent automatically from hijacked accounts. Your friend probably doesn’t know their account is compromised. Contact them through a different platform and let them know they need to change their Discord password immediately.
Can I get my money back after depositing on a fake casino?
It’s unlikely. Crypto transactions are designed to be irreversible, which is exactly why scammers insist on crypto deposits. Still, report the incident. File a complaint at ic3.gov (FBI) or your local cybercrime unit. Report the receiving wallet to your exchange. Report the scam site to Discord and Google Safe Browsing. These reports help get scam sites taken down faster, even if your individual funds may not be recoverable.
How do I know if I have a token stealer on my computer?
Token stealers are designed to be hard to spot. They run once, grab your tokens, and may delete themselves afterward. Warning signs: your Discord account sending messages you didn’t write, unfamiliar login sessions in your settings, programs you don’t remember installing, and new browser extensions. If you recently downloaded any game cheat or “free tool” from an unofficial source, assume it contained a token stealer. Run a full system scan.
Will changing my Discord password stop the scam messages?
Yes. Changing your password invalidates all existing tokens, cutting off the attacker’s access immediately. But if the token stealer is still on your system, it can grab the new token after you log back in. That’s why you need to remove the malware first, then change your password. Otherwise you’re locking the door while the thief is still inside.
Final Verdict
This is one of the most effective social engineering campaigns Discord has seen. It works because messages come from real friends, the casino sites look professional, and “free money” is hard to ignore. Krebs on Security identified over 1,200 scam domains running on shared infrastructure. Thousands of Discord accounts were hijacked through token stealers hidden in game cheats.
The core defense is simple: no real giveaway requires a deposit. If someone asks you to pay money to receive money, walk away. It doesn’t matter whose face is on the message.
If your account was hijacked, change your password immediately, remove the malware source (usually a game cheat), enable 2FA, and warn your contacts. If you deposited money, document everything and file reports with the FBI’s IC3 and Discord’s Trust & Safety team. The money may be gone, but the reports help shut these operations down.
Ventsislav Krastev
Ventsislav is a cybersecurity expert at SensorsTechForum since 2015. He has been researching, covering, helping victims with the latest malware infections plus testing and reviewing software and the newest tech developments. Having graduated Marketing as well, Ventsislav also has passion for learning new shifts and innovations in cybersecurity that become game changers. After studying Value Chain Management, Network Administration and Computer Administration of System Applications, he found his true calling within the cybersecrurity industry and is a strong believer in the education of every user towards online safety and security.
Follow Me:
- Windows
- Mac OS X
- Google Chrome
- Mozilla Firefox
- Microsoft Edge
- Safari
- Internet Explorer
- Stop Push Pop-ups
How to Remove Mr Beast Discord Scam from Windows.
Step 1: Scan for Mr Beast Discord Scam with SpyHunter Anti-Malware Tool
Step 2: Boot Your PC In Safe Mode
Step 3: Uninstall Mr Beast Discord Scam and related software from Windows
Uninstall Steps for Windows 11
Uninstall Steps for Windows 10 and Older Versions
Here is a method in few easy steps that should be able to uninstall most programs. No matter if you are using Windows 10, 8, 7, Vista or XP, those steps will get the job done. Dragging the program or its folder to the recycle bin can be a very bad decision. If you do that, bits and pieces of the program are left behind, and that can lead to unstable work of your PC, errors with the file type associations and other unpleasant activities. The proper way to get a program off your computer is to Uninstall it. To do that:
Follow the instructions above and you will successfully uninstall most programs.
Step 4: Clean Any registries, Created by Mr Beast Discord Scam on Your PC.
The usually targeted registries of Windows machines are the following:
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
You can access them by opening the Windows registry editor and deleting any values, created by Mr Beast Discord Scam there. This can happen by following the steps underneath:
Tip: To find a virus-created value, you can right-click on it and click "Modify" to see which file it is set to run. If this is the virus file location, remove the value.
Video Removal Guide for Mr Beast Discord Scam (Windows).
Get rid of Mr Beast Discord Scam from Mac OS X.
Step 1: Uninstall Mr Beast Discord Scam and remove related files and objects
Your Mac will then show you a list of items that start automatically when you log in. Look for any suspicious apps identical or similar to Mr Beast Discord Scam. Check the app you want to stop from running automatically and then select on the Minus (“-“) icon to hide it.
- Go to Finder.
- In the search bar type the name of the app that you want to remove.
- Above the search bar change the two drop down menus to “System Files” and “Are Included” so that you can see all of the files associated with the application you want to remove. Bear in mind that some of the files may not be related to the app so be very careful which files you delete.
- If all of the files are related, hold the ⌘+A buttons to select them and then drive them to “Trash”.
In case you cannot remove Mr Beast Discord Scam via Step 1 above:
In case you cannot find the virus files and objects in your Applications or other places we have shown above, you can manually look for them in the Libraries of your Mac. But before doing this, please read the disclaimer below:
You can repeat the same procedure with the following other Library directories:
→ ~/Library/LaunchAgents
/Library/LaunchDaemons
Tip: ~ is there on purpose, because it leads to more LaunchAgents.
Step 2: Scan for and remove Mr Beast Discord Scam files from your Mac
When you are facing problems on your Mac as a result of unwanted scripts and programs such as Mr Beast Discord Scam, the recommended way of eliminating the threat is by using an anti-malware program. SpyHunter for Mac offers advanced security features along with other modules that will improve your Mac’s security and protect it in the future.
Video Removal Guide for Mr Beast Discord Scam (Mac)
Remove Mr Beast Discord Scam from Google Chrome.
Step 1: Start Google Chrome and open the drop menu
Step 2: Move the cursor over "Tools" and then from the extended menu choose "Extensions"
Step 3: From the opened "Extensions" menu locate the unwanted extension and click on its "Remove" button.
Step 4: After the extension is removed, restart Google Chrome by closing it from the red "X" button at the top right corner and start it again.
Erase Mr Beast Discord Scam from Mozilla Firefox.
Step 1: Start Mozilla Firefox. Open the menu window:
Step 2: Select the "Add-ons" icon from the menu.
Step 3: Select the unwanted extension and click "Remove"
Step 4: After the extension is removed, restart Mozilla Firefox by closing it from the red "X" button at the top right corner and start it again.
Uninstall Mr Beast Discord Scam from Microsoft Edge.
Step 1: Start Edge browser.
Step 2: Open the drop menu by clicking on the icon at the top right corner.
Step 3: From the drop menu select "Extensions".
Step 4: Choose the suspected malicious extension you want to remove and then click on the gear icon.
Step 5: Remove the malicious extension by scrolling down and then clicking on Uninstall.
Remove Mr Beast Discord Scam from Safari
Step 1: Start the Safari app.
Step 2: After hovering your mouse cursor to the top of the screen, click on the Safari text to open its drop down menu.
Step 3: From the menu, click on "Preferences".
Step 4: After that, select the 'Extensions' Tab.
Step 5: Click once on the extension you want to remove.
Step 6: Click 'Uninstall'.
A pop-up window will appear asking for confirmation to uninstall the extension. Select 'Uninstall' again, and the Mr Beast Discord Scam will be removed.
Eliminate Mr Beast Discord Scam from Internet Explorer.
Step 1: Start Internet Explorer.
Step 2: Click on the gear icon labeled 'Tools' to open the drop menu and select 'Manage Add-ons'
Step 3: In the 'Manage Add-ons' window.
Step 4: Select the extension you want to remove and then click 'Disable'. A pop-up window will appear to inform you that you are about to disable the selected extension, and some more add-ons might be disabled as well. Leave all the boxes checked, and click 'Disable'.
Step 5: After the unwanted extension has been removed, restart Internet Explorer by closing it from the red 'X' button located at the top right corner and start it again.
Remove Push Notifications from Your Browsers
Turn Off Push Notifications from Google Chrome
To disable any Push Notices from Google Chrome browser, please follow the steps below:
Step 1: Go to Settings in Chrome.
Step 2: In Settings, select “Advanced Settings”:
Step 3: Click “Content Settings”:
Step 4: Open “Notifications”:
Step 5: Click the three dots and choose Block, Edit or Remove options:
Remove Push Notifications on Firefox
Step 1: Go to Firefox Options.
Step 2: Go to “Settings”, type “notifications” in the search bar and click "Settings":
Step 3: Click “Remove” on any site you wish notifications gone and click “Save Changes”
Stop Push Notifications on Opera
Step 1: In Opera, press ALT+P to go to Settings.
Step 2: In Setting search, type “Content” to go to Content Settings.
Step 3: Open Notifications:
Step 4: Do the same as you did with Google Chrome (explained below):
Eliminate Push Notifications on Safari
Step 1: Open Safari Preferences.
Step 2: Choose the domain from where you like push pop-ups gone and change to "Deny" from "Allow".
Mr Beast Discord Scam-FAQ
What Is Mr Beast Discord Scam?
The Mr Beast Discord Scam threat is adware or browser redirect virus.
It may slow your computer down significantly and display advertisements. The main idea is for your information to likely get stolen or more ads to appear on your device.
The creators of such unwanted apps work with pay-per-click schemes to get your computer to visit risky or different types of websites that may generate them funds. This is why they do not even care what types of websites show up on the ads. This makes their unwanted software indirectly risky for your OS.
What Are the Symptoms of Mr Beast Discord Scam?
There are several symptoms to look for when this particular threat and also unwanted apps in general are active:
Symptom #1: Your computer may become slow and have poor performance in general.
Symptom #2: You have toolbars, add-ons or extensions on your web browsers that you don't remember adding.
Symptom #3: You see all types of ads, like ad-supported search results, pop-ups and redirects to randomly appear.
Symptom #4: You see installed apps on your Mac running automatically and you do not remember installing them.
Symptom #5: You see suspicious processes running in your Task Manager.
If you see one or more of those symptoms, then security experts recommend that you check your computer for viruses.
What Types of Unwanted Programs Are There?
According to most malware researchers and cyber-security experts, the threats that can currently affect your device can be rogue antivirus software, adware, browser hijackers, clickers, fake optimizers and any forms of PUPs.
What to Do If I Have a "virus" like Mr Beast Discord Scam?
With few simple actions. First and foremost, it is imperative that you follow these steps:
Step 1: Find a safe computer and connect it to another network, not the one that your Mac was infected in.
Step 2: Change all of your passwords, starting from your email passwords.
Step 3: Enable two-factor authentication for protection of your important accounts.
Step 4: Call your bank to change your credit card details (secret code, etc.) if you have saved your credit card for online shopping or have done online activities with your card.
Step 5: Make sure to call your ISP (Internet provider or carrier) and ask them to change your IP address.
Step 6: Change your Wi-Fi password.
Step 7: (Optional): Make sure to scan all of the devices connected to your network for viruses and repeat these steps for them if they are affected.
Step 8: Install anti-malware software with real-time protection on every device you have.
Step 9: Try not to download software from sites you know nothing about and stay away from low-reputation websites in general.
If you follow these recommendations, your network and all devices will become significantly more secure against any threats or information invasive software and be virus free and protected in the future too.
How Does Mr Beast Discord Scam Work?
Once installed, Mr Beast Discord Scam can collect data using trackers. This data is about your web browsing habits, such as the websites you visit and the search terms you use. It is then used to target you with ads or to sell your information to third parties.
Mr Beast Discord Scam can also download other malicious software onto your computer, such as viruses and spyware, which can be used to steal your personal information and show risky ads, that may redirect to virus sites or scams.
Is Mr Beast Discord Scam Malware?
The truth is that PUPs (adware, browser hijackers) are not viruses, but may be just as dangerous since they may show you and redirect you to malware websites and scam pages.
Many security experts classify potentially unwanted programs as malware. This is because of the unwanted effects that PUPs can cause, such as displaying intrusive ads and collecting user data without the user’s knowledge or consent.
About the Mr Beast Discord Scam Research
The content we publish on SensorsTechForum.com, this Mr Beast Discord Scam how-to removal guide included, is the outcome of extensive research, hard work and our team’s devotion to help you remove the specific, adware-related problem, and restore your browser and computer system.
How did we conduct the research on Mr Beast Discord Scam?
Please note that our research is based on independent investigation. We are in contact with independent security researchers, thanks to which we receive daily updates on the latest malware, adware, and browser hijacker definitions.
Furthermore, the research behind the Mr Beast Discord Scam threat is backed with VirusTotal.
To better understand this online threat, please refer to the following articles which provide knowledgeable details.