How do you block phishing links on Discord?

1. 1

   Turn LinkShield on

   Odhacz — krok 1: Turn LinkShield on

   Panel → Security → Content protection → Links and invites/venonsec-panel

   LinkShield is the layer specialising in addresses: it looks at the domain, the rate at which links are pasted and the reports, not at the message content.

   • LinkShield active: on.
   • Block Discord invites: on, unless you run partner exchanges in public channels.
   • Log channel (ID): the staff channel where information about blocked addresses goes.
2. 2

   Set the link posting limits

   Odhacz — krok 2: Set the link posting limits

   Panel → Security → Content protection → Links and invites

   A phishing campaign almost always looks like a series of messages with a link in a short time. A limit in a time window catches that pattern, even when the domain is brand new.

   • Link spam limit: on.
   • Max. links in the window and Window (seconds): 3 links per 20 seconds, for example.
   • Timeout (minutes): a short break for an account that crossed the limit.
   • Max. invite violations and Ban past the violation limit: enable deliberately, because that action cannot be undone for the member.
3. 3

   Add the trusted domains

   Odhacz — krok 3: Add the trusted domains

   Panel → Security → Content protection → Trusted domains

   The allowlist exists so the filter does not delete the links you care about — documentation, your shop, a partner's channel. Keep it short and review it every few months.

   • Add only domains you genuinely trust and that you control or whose owner you know.
   • Do not add link shorteners — any page at all can hide behind one shortened address.
   • For every partner domain, agree who on the staff is responsible for reviewing it periodically.
4. 4

   Enable reports from members

   Odhacz — krok 4: Enable reports from members

   Panel → Security → Content protection → Log channel and reports/report-link

   The community notices new campaigns faster than any list does. Reports turn that attention into automatic protection.

   • Reports from members: on.
   • Auto-block threshold (reports): the number of independent reports after which a domain is blocked automatically.
   • The /report-link <url> [category] command accepts the categories: Scam, Phishing, Malware, Other.
   • The same can be done without typing the address: the message context menu → Apps → Report a suspicious link.
5. 5

   Tell the community how to report

   Odhacz — krok 5: Tell the community how to report

   The reporting mechanism only works when people know about it. One pinned message raises the number of reports more than any threshold change.

   • Say it plainly: do not click, report it through the message context menu.
   • Explain that the report is anonymous to the rest of the server and goes only to the staff.
   • Add instructions for the case where somebody did click: change the password, log out of all devices, enable 2FA.
6. 6

   Review the threat database

   Odhacz — krok 6: Review the threat database

   Panel → Security → Content protection → Threat database

   The threat database shows the reports and the domains blocked automatically. A regular review catches both new campaigns and false reports.

   • You can add an address by hand through the New domain and Threat category fields.
   • Remove entries reported by mistake, so legitimate sites are not blocked.
   • Schedule a review once a week — more often after a wave of phishing.

The steps you tick are saved in your browser — you can come back and finish later.