Skip to main content

Discord Security Setup Guide for Winible Creators

Over the past few weeks, we've seen scammers joining creator Discord servers, changing their display name to impersonate the creator, and sending DMs to subscribers asking for additional payments, VIP upgrades, or fake betting opportunities.

Please complete the following security settings immediately to protect your community.

1. Prevent Members from Messaging Each Other

This is the single biggest way to stop scams.

Disable Server Member DMs

  1. Click your Server Name (top left)

  2. Open Server Settings

  3. Select Privacy Settings

  4. Toggle OFF:

Allow direct messages from server members

  1. Click Save Changes

This prevents members from discovering and privately messaging one another directly from your server.


2. Create Announcement-Only Channels

For channels like:

  • #announcements

  • #updates

  • #vip-news

  • #daily-picks

Configure permissions so subscribers can read but cannot reply.

Channel Permissions

For @everyone or your Subscriber role:

✅ Allow

  • Read Messages

  • Read Message History

❌ Disable

  • Send Messages

  • Create Threads

  • Send Messages in Threads

  • Add Reactions (optional)

This keeps important channels clean and prevents impersonators from posting.


3. Lock Down Subscriber Permissions

Your subscriber roles should not have moderation or identity permissions.

For Subscriber roles, make sure these permissions are OFF:

❌ Change Nickname (prevents members from changing their own server nickname to something misleading, such as your creator name)

❌ Manage Nicknames

❌ Manage Roles

❌ Mention @everyone

❌ Manage Channels

❌ Manage Webhooks

❌ Manage Expressions

❌ Manage Threads

❌ Administrator

❌ Kick Members

❌ Ban Members

❌ Moderate Members

❌ Manage Messages

Note: Discord does not allow you to stop users from changing their global Discord username or display name. The setting above only prevents them from changing their nickname within your server, which helps reduce impersonation.


4. Make Sure Only You Can Post as the Creator

If possible:

  • Give yourself a unique Creator/Admin role.

  • Display that role separately in the member list.

  • Use a unique role color.

  • Consider enabling Server Profiles so your creator account is clearly distinguished.

Tell subscribers:

I will NEVER DM you asking for additional payments, crypto, Cash App, Venmo, or subscriptions.


5. Use a Ticket System for Support

Instead of allowing members to message each other:

Use a ticket bot such as:

  • Ticket Tool

  • TicketsBot

  • Support System

Subscribers can privately contact your staff, but not other members.


6. Educate Your Community

Pin a message like this:

⚠️ Scam Warning

Our team will NEVER send you a direct message asking for additional payments, VIP upgrades, crypto, Cash App, Venmo, or Zelle.

If anyone messages you claiming to be me, please report them immediately.

Only trust announcements posted in this Discord.


7. Regularly Audit Your Server

Every few weeks:

  • Review all role permissions.

  • Remove unnecessary administrator privileges.

  • Check that Subscriber roles cannot change nicknames.

  • Verify announcement channels remain read-only.

  • Remove suspicious or inactive accounts if necessary.


Recommended Security Checklist

  • ✅ Disable direct messages from server members

  • ✅ Prevent subscribers from changing their server nickname

  • ✅ Lock announcement channels to read-only

  • ✅ Remove unnecessary moderation permissions from subscriber roles

  • ✅ Use a ticket system for support

  • ✅ Pin a scam warning message

  • ✅ Remind members that you will never request additional payments via DM

Following these steps will significantly reduce the risk of impersonation and help keep your subscribers safe from scams.

Did this answer your question?