The Discord “Try My Game” Scam – Report

Did you recently receive a Discord DM from a friend, mutual server member, or random account asking you to “try my game,” “test my game,” or help with a small indie project? If so, be very careful before clicking anything, downloading a file, or running an installer. This request may be part of the long-running Discord “Try My Game” scam, a fake game-testing lure used to steal Discord accounts, browser passwords, cookies, payment access, and sometimes more.

The message often seems harmless. It may come from someone you know. It may claim the sender made a game, needs feedback for a project, wants help with a birthday surprise, or urgently needs someone to test a beta. Some victims reported fake game names such as Xirela, StarNovas Beta, DeadTrigger, Nivaros, Livarox, Norelia, Sean Journey, and Inner Evil. Others described fake itch.io-style pages with screenshots, developer blurbs, and download buttons that looked convincing.

Scams like "Try My Game" are known to steal personal data and passwords. Install SpyHunter Pro to scan for risks, remove dangerous trackers, and enable real-time protection.

Try Free For 7 Days*

Checking risks related to "Try My Game"
Threats found

Advanced Anti-Malware Protection

Blocks Harmful Websites

Custom Malware Fixes Just For You

Prevents Re-installation

OFFER
*Source of claim SH can remove it. Trial w/Credit card; image is for illustration; full terms.

But the “game” is not the real point. The download may be an EXE, MSI, RAR, ZIP, or fake installer such as Setup Game.exe. Once run, victims have reported Discord crashing, being logged out, losing access to their account, receiving email-change alerts, and seeing PayPal or card activity shortly afterward. This is not a simple prank or harmless link. It is, similar to Microsoft Single Use Code Scam, a serious account-theft and malware scam.

Understanding the Discord “Try My Game” Scam

The Discord “Try My Game” scam works because it exploits trust. Instead of sending an obvious spam message from a stranger, scammers often use accounts they have already stolen. That means the message may come from a real friend, an old contact, a game developer you know, or someone who shares servers with you. One victim said they trusted the request because the person who messaged them had made games before. Another said the sender was an old friend who was plausibly into game development.

The usual premise is simple: someone has made a game and needs you to test it. They may send you to a fake game page, a Blogspot or Blogger-hosted site, a cloud link, a Dropbox download, or a page designed to look like itch.io. Some fake pages impersonated the real indie game Archimoulin. Reported suspicious domains included cakewind[.]blogspot[.]com, carnagev1[.]blogspot[.]com, kelarigame[.]blogspot[.]com, klorigame[.]blogspot[.]com, meraliagame[.]blogspot[.]com, ravielchy[.]blogspot[.]com, ravielchygame[.]blogspot[.]com, tamunagame[.]blogspot[.]com, and veriliagame[.]blogspot[.]com. Other victim reports mentioned sean-journey[.]com and playinnerevil[.]pages[.]dev.

Once the file is run, victims and researchers described several possible outcomes: Discord session tokens may be stolen, saved browser passwords and cookies may be copied, Discord may be modified or forced to log out, and login details or 2FA codes may be captured if the victim logs back in on the infected computer. Some reports also mentioned stolen payment access, Nitro purchases, extortion attempts, and other account compromises involving Gmail, Microsoft, Steam, Spotify, Battle.net, Facebook, and PayPal.

This is why simply saying “I only lost Discord” can be risky. Several victims later realized that saved browser credentials, cookies, and payment-linked accounts may also have been exposed.

What to Do If You’ve Fallen for the “Try My Game” Scam

If you clicked a link, downloaded the file, or ran the fake game, act quickly. The most important point repeated across victim reports is this: do not continue logging into accounts on the infected computer. Use a clean device first.

Disconnect the affected computer: Turn off Wi-Fi, unplug Ethernet, or otherwise isolate the device if you ran the file.

Change passwords from another device: Start with Discord, your email, PayPal, Steam, Google, Microsoft, and any account with saved browser credentials. One victim said the attacker sent them a text file containing Chrome usernames and passwords in plain text, so treat saved browser passwords seriously.

Enable or reset 2FA: Add 2FA to important accounts, but remember that some victims reported attackers bypassing protection through stolen session tokens or by capturing codes after login on an infected Discord client.

Log out all sessions: Revoke active sessions where possible, especially for Discord, Google, Steam, and email accounts.

Check payment activity: Look for PayPal, card, Nitro, Nitro Classic, gift, boost, or voucher purchases. Report suspicious transactions immediately. Victims reported losses or attempted charges such as $15, over $70, and purchases for 3 months of Nitro.

Warn your friends: If your Discord account was taken, tell contacts through another channel not to click links from your account.

Contact Discord support: Victims reported recovery times ranging from 12 hours to 3 days, 8 days, 10 days, and in some cases much longer. Include clear details that your account was compromised through a fake game download.

Clean the device: Run full security scans. Also fully uninstall Discord, remove Discord AppData/cache traces, and remove suspicious fake game files. If compromise appears deeper or continues, many victims chose a clean Windows reinstall.

How the “Try My Game” Scam Tricks You

The scam uses familiar social-engineering techniques, but the Discord setting makes them especially convincing.

It comes from someone you trust: The strongest trick is the compromised-friend effect. A message from a friend feels safer than a message from a stranger. One victim said the scam spread through DMs after accounts were stolen, causing people to receive the malicious link from contacts they had spoken to for years.

It sounds like a normal favor: “Can you try my game?” is casual and low-pressure at first. Other messages add emotional pressure, such as helping with a school project, supporting a job-hunting developer, or contributing to a birthday surprise.

It creates urgency: One reported message said testing would “only take 10 minutes” and was “very urgent.” This discourages careful checking.

It uses fake legitimacy: Some pages include game screenshots, a developer blurb, a download button, itch.io-style design, or even a fake trailer. One scammer allegedly tried to prove the file was safe by showing it on a malware-testing site.

It targets gamers and creators: Indie game communities are built around testing, feedback, and sharing builds. The scam abuses that culture.

Recognizing Warning Signs

Watch out for these specific red flags:

Unexpected game-testing DMs: Messages like “Can you try my game?”, “Can you test my game?”, “I made a game come test it :)”, or “Test my game on Steam” should be treated carefully, even from friends.

Odd behavior from the sender: The person may answer none of your normal questions, speak differently than usual, edit messages after being challenged, delete the link, or pressure you when you hesitate.

Suspicious hosting: A fake indie game hosted on Blogspot, Blogger, Dropbox, Pages.dev, or a random new domain is a major warning sign, especially if it imitates itch.io.

Dangerous file types: Be cautious with EXE, MSI, RAR, and ZIP downloads sent through Discord. Several victims only realized something was wrong after seeing that the “game” was a Node.js-style application or a strange installer.

No search results for the game: Victims reported searching game names like Xirela and finding nothing, then assuming it was safe. Lack of information can itself be suspicious.

Mismatch in names: One user saw a contact mention Nivaros, send a link with the same name, then provide a trailer for Livarox and edit the messages after being asked.

After-running symptoms: Discord crashing, forced logout, QR login not loading, strange login errors, email/password change alerts, PayPal alerts, command windows, browser crashes, or friends receiving scam messages from your account are all urgent warning signs.

How to Handle a Suspicious “Try My Game” Message

If you receive one of these messages, do not click the link, download the file, or run anything. Ask the sender about it through another channel, such as a phone call, text message, or another app. If the account was compromised, the real person may not know their Discord is being used.

If you already clicked the page but did not download or run the file, the extracted reports repeatedly treated that as lower risk than running the executable. Still, do not enter Discord credentials on any fake sign-in page, and do not provide 2FA codes.

If you downloaded the file but did not run it, delete it. Do not open it “just to check.” Several victims were compromised only after running the EXE or installer.

Reporting the Scam

Report the suspicious Discord account, message, and link. If the page is hosted on Blogger, Dropbox, Steam, Discord, or another platform, report it there too. If your account was stolen, submit a Discord support ticket as soon as possible and explain that it was compromised through a fake game download.

Also report fraudulent PayPal or card charges immediately. One victim said PayPal refunded them exactly 4 hours after opening a case; another advised contacting PayPal support directly if the initial dispute fails.

Useful Resources for Scam Reporting and Prevention (By Country)

Strengthening Your Device and Account Security

After interacting with this scam, assume the damage may extend beyond Discord if you ran the file. Change saved browser passwords from a clean device, revoke sessions, monitor email alerts, and check financial accounts. Fully remove and reinstall Discord only after deleting old Discord folders and cache. Some victims found that simply regaining the account was not enough because the local Discord installation could still be compromised.

The safest lesson is simple: a friendly Discord DM is not proof that a file is safe. Pause, verify the sender outside Discord, check the real source of the download, and never run an unexpected “game” file just because it came from someone you know.