Note: Discord has partially addressed the issue by adding a warning in the mobile app when you scan a QR code.
Recently, Discord added the ability to scan a QR code with their mobile app to log in. It's convenient, but it has a massive flaw. Attackers have been gaining access to other people's accounts simply by sending a login QR code but accompanying it with a message like "Scan this QR code to redeem your Nitro gift!"
To combat these scams, I created this Discord Bot which scans messages for QR codes and deletes any messages containing them.
This bot has no settings and begins working as soon as it has been added to a server. It scans all attachments and embedded images. If it fails to scan a message, you can make it re-scan the message by adding any reaction to the message.
To get this information simply tag the bot in any channel that it has post-messages access to.
I have stopped hosting this discord bot. Follow the steps below to self-host.
If you would like to host this bot yourself instead of using my hosted version, follow these instructions. They assume you have created an Application and registered a Bot account with Discord's Developer Portal.
env.json
and fill it with the following contents:
{
"TOKEN": "your-bot-token-here"
}
npm install
node index.js
to start the bot. It will print to the console the port it's running on. Visit localhost:port-here
to view the bot's webpage.