Fake Playtest Scams on Discord: How They Work

Fake playtest scams on Discord trick people into downloading malware or logging in to a fake page by offering early access to a game. On 30 March 2026, security company Bitdefender warned that "fake 'playtest' or 'beta access' invites are being used to spread malware and steal accounts."

This page explains each stage of the scam, the warning signs, how real playtests are run, and the steps to take if you've already opened the file or link.

Key Information

Detail	Summary
What it is	A fake invite to test an unreleased game, used to deliver malware or steal logins
Where it spreads	Discord DMs and servers, Steam messages, YouTube comments and social media
What's stolen	Saved passwords, browser sessions, authentication tokens, email access, financial data and crypto wallets
Malware types	Infostealers and backdoors
How it spreads further	The stolen account messages the victim's friends with the same offer
Warning issued	Bitdefender, 30 March 2026

How Fake Playtest Scams on Discord Work

Bitdefender describes the scam in five stages.

The approach. You get a casual, unsolicited message offering a "limited slot" in an early build. Some scammers build a fake friendship for weeks or months first. Often the message comes from a friend's account that has already been hacked, which makes it far more convincing.
The fake game. You're sent to a website made to look like a real Steam store page, or invited to a Discord server filled with bots and fake activity so the game looks popular.
The download or login. You're asked to download a "playtest build", usually a ZIP file or installer, or to sign in through a link that leads to a spoofed login page.
The theft. The file quietly installs malware, or the fake page captures your login details and session tokens. Bitdefender says infostealers "can extract passwords, crypto wallets, and financial data."
The spread. The attacker uses your account to send the same invite to your friends, starting the cycle again.

Real Examples

Bitdefender's report and earlier warnings name several games used as bait:

Game	What happened
Sand	Attackers posed as the developers and sent phishing links that copied Steam's login page. The developers said no such test existed
Battlefield 6	Fake playtest invites used leaks and hype to send players to credential-stealing sites
Chemia	A playtest distributed through Steam contained several types of malware, including infostealers and backdoors
Subnautica 2	In February 2025, the developers warned of fraudulent playtest links sent by Steam DM, saying "We will never contact anyone by Steam DM for any potential playtests"

The Subnautica 2 warning was reported by Bitdefender in February 2025.

Warning Signs

Treat a playtest offer as a scam if it has any of these:

It arrived as a DM, especially from someone you don't know or a friend acting out of character.
It's urgent or exclusive. "Only a few slots left" or "test it tonight." Bitdefender notes that "urgency is one of the attacker's most reliable tools."
It asks you to download a file from a link, rather than through Steam or another official store.
It asks you to log in to Discord or Steam through a link.
The game isn't publicly available and you're being asked to request access privately.
The Discord server looks busy but shallow, with lots of members and little real conversation.

How Real Playtests Work

Legitimate studios announce playtests publicly. As Bitdefender puts it: "They don't contact individual players to invite them to play."

Real playtest	Fake playtest
Announced on the developer's website, socials or official server	Offered in a private message
Joined through an official store, such as Steam's own playtest sign-up on the game's store page	Downloaded as a ZIP or installer from a link
Contact by the studio's official email or official channels	Contact from a random account or a friend's account
No need to log in through a third-party link	Asks you to log in through a link

If you're unsure, go straight to the developer's official website or official Discord server and look for the announcement yourself.

What to Do If You Downloaded the File

Bitdefender's advice, if you ran a fake file without protection:

Disconnect from the internet to stop the malware sending more data.
Run a full security scan with up-to-date antivirus software.
Change all your passwords, starting with email and Discord, from a device you know is clean.
Turn on two-factor authentication on every account that supports it.
Consider reinstalling your operating system if the infection can't be fully removed.

On Discord, also:

Log out of all sessions and remove any unknown apps under User Settings > Authorized Apps.
Warn your friends that your account may have sent them the same invite.
Check your payment methods and any Nitro or Shop purchases you didn't make.

Advice for Server Owners

Block suspicious links and file types with Discord's AutoMod. The Discords.ai wiki on AutoMod setup explains how.
Pin a warning that your team will never DM members about playtests.
Announce real tests only in official channels, so members know where to look.
Share safe invite practices with your community. See the wiki on Discord server invite link best practices.

Fake playtests are closely related to fake giveaways. Discords.ai's guide to the fake giveaway epidemic covers that scam.

Frequently Asked Questions

What is a fake playtest scam on Discord?

It's a scam where someone invites you to test an unreleased game, then gets you to download malware or log in to a fake page so they can steal your account and data.

Why did my friend send me a game to test?

Their account has probably been hacked. Fake playtest scams spread by using stolen accounts to message the victim's friends. Contact your friend another way before opening anything.

Can a fake playtest steal my Discord account?

Yes. Bitdefender says the malware can take saved passwords, browser sessions and authentication tokens, which can give attackers access to your accounts.

How do I know if a playtest is real?

Real playtests are announced publicly by the developer and joined through official stores or channels. Developers don't DM individual players with download links.

Summary

Fake playtest scams on Discord use the excitement of early access to get people to download malware or log in to fake pages. The invite often comes from a friend's hacked account and leads to a lookalike Steam page or a bot-filled server. Real playtests are announced publicly, so treat any private invite with a download link as a scam. If you've already run the file, disconnect, scan, change your passwords and turn on two-factor authentication.

Sources

Bitdefender: Fake game playtest scams, Silviu Stahie, 30 March 2026
Bitdefender: Subnautica 2 fake playtest links sent as part of malicious campaign, 14 February 2025