A real Discord bot is easy to spot: it has an APP tag next to its name, the label that replaced the older BOT tag. The accounts people actually worry about have no tag at all. They are normal user accounts run by a script, built to look like members. To tell if one is a bot, check three things: how old the account is, how much effort went into the profile, and what it did first after joining.

This guide covers the checks anyone can do in a minute, then what server admins can set up so they are not doing it by hand.

Two kinds of bot, and only one is a problem

• Official bots are registered applications that an admin chose to add. Discord labels them with an APP tag, and verified ones show a check mark inside it. MEE6, Dyno and Carl-bot are examples.

• Scripted user accounts are ordinary accounts controlled by software. They carry no label, because to Discord they look like people. Automating a user account is against Discord's Terms of Service, which is why these accounts try hard not to look automated.

Everything below is about the second kind.

Check the account age first

Open the profile and find Member Since. Discord shows two dates: when the account was created and when it joined this server. Most fake accounts are young, because they get banned and replaced constantly. An account made a few days ago that joined today and is already active in DMs fits the pattern.

Age alone proves nothing. Plenty of real people are new to Discord. It is the first filter, not the verdict.

Look at the profile

• Default or reused avatar. Either the stock Discord icon or a photo that shows up on many accounts.

• Empty bio and no connections. Real accounts tend to collect a status, a bio or a linked account over time.

• A pattern username. A common first name followed by digits, or a string that reads like it was generated.

• No mutual servers or friends with anyone in the community it just joined.

A single one of these is normal. Three or four together on a brand-new account is a strong signal.

Watch what it does first

Behavior is the most reliable tell. Real members lurk, react, and reply to what others said. Scripted accounts act immediately and the same way every time: a link in the first message, a sweep of mentions, or a DM to new members within seconds of joining. In our 2026 security report, 76.2 percent of scam accounts struck with their very first message.

• The same message in several channels, or the same one you saw in another server.

• Replies that ignore the conversation and steer toward a link, a giveaway or moving to DMs.

• An unsolicited DM offering support, a prize or an investment.

• Urgency. A deadline, a limited spot, a problem with your account.

What to do when you spot one

• Do not click the link and do not reply. Replying confirms your account is active.

• Report the message or profile through Discord's report option, then block the account.

• Tell the server's moderators, ideally with a screenshot. One report often exposes a whole batch that joined together.

If you run the server

Checking profiles by hand works for one account. It does not work during a wave, when dozens join inside a minute. Start with Discord's own controls: raise the verification level, turn on membership screening, and configure AutoMod for link and mention spam. The full baseline is in how to set up a Discord server the right way.

AutoMod reads messages, not accounts, so it will not tell you whether the sender is real. For that you need a tool that scores age, profile and behavior together and acts before anyone is messaged. We compare the options in our Discord security bot comparison. When the accounts arrive in coordinated batches, the server-level view is in how to detect bot farms and fake accounts on Discord, and the emergency steps are in how to stop a Discord raid.

This is the layer collony.ai handles. It reads behavior rather than keywords and removes scam accounts in seconds, with a median detection time of 7.5 seconds in the same report.

Frequently asked questions

How can you tell if a Discord account is a bot?

Real bots carry an APP tag next to their name. A fake account posing as a person has no tag, so check the profile instead: a Discord join date only days old, a default or reused avatar, an empty bio, and a first action that is a link, a mass mention or a DM sent seconds after joining.

How do I check how old a Discord account is?

Open the profile and look at Member Since. Discord shows two dates there, when the account was created and when it joined the current server. An account created this week that joined today and is already sending links deserves suspicion.

Does Discord have bot accounts?

Yes, two kinds. Official bots are registered applications, labelled with an APP tag, and added by server admins. The other kind is a normal user account run by a script. Automating a user account breaks Discord's Terms of Service, and these are the accounts used for spam and scams.

Why did a random account DM me right after I joined a server?

Scripted accounts watch member lists and message newcomers within seconds, before moderators notice. Treat an unsolicited DM from someone you have never spoken to as a scam attempt, especially if it mentions a giveaway, support or an investment. Do not click the link. Report the account and block it.

Can Discord AutoMod detect fake accounts?

No. AutoMod filters message content such as banned words, spam and mention floods. It does not judge whether the account behind a message is a real person. Spotting fake accounts needs a tool that scores account age, profile and behavior together.