Reddit DM Scams: How Fraud Spreads Through Private Messages and Fake Moderators

Reddit calls itself "the front page of the internet," and the numbers back that up. As of Q3 2025, the platform had 116 million daily active users and over 443 million weekly active users across more than 100,000 communities. With that scale comes an uncomfortable reality: wherever millions of people gather online, scammers follow.

Private messages and chat DMs have become one of Reddit's most exploited attack surfaces. Unlike public posts that moderators can monitor and remove, direct messages happen away from community eyes, downvotes, and the crowd wisdom Reddit's public format relies on. That privacy is exactly what scammers count on.

According to the U.S. Federal Trade Commission (FTC), Americans lost $2.1 billion to social media scams in 2025, nearly 30% of all people who reported losing money to fraud said contact started on a social platform. Those losses are eight times higher than in 2020.

Reddit is a growing piece of that picture. Here's what you need to know.

Why Reddit DMs are a scammer's playground

Most people think of Reddit as an anonymous forum for news, hobbies, and debate. But it's also a richly indexed database of personal interests, struggles, and behaviors, all public, all searchable, all usable by bad actors.

When you post in r/personalfinance about paying off debt, in r/mentalhealth about a hard time, or in r/investing about looking for opportunities, you've handed a scammer a behavioral profile. They know what you care about, what you're vulnerable to, and how to open a conversation that feels relevant to your life.

A new wave of Reddit chat scammers has been observed referencing actual posts and comments users have made before initiating contact, mentioning a specific comment or community to manufacture instant credibility. It feels less like a scam and more like a follower.

Combine that with Reddit's low barrier to account creation, the ability to DM most users directly, and the platform's reputation for authenticity, and you have a potent vector for fraud.

The most common Reddit DM scam types

1. The fake moderator scam

This is the most Reddit-specific scam, and one of the most psychologically effective.

Step 1, Target selection. The scammer identifies an active user in a popular subreddit, often someone who recently posted or appears unfamiliar with Reddit's systems.

Step 2, The impersonation message. The victim receives a DM appearing to come from a subreddit moderator, opening with urgency: "Your account has been flagged," "Your post violated community guidelines," or "Verify your account to prevent a ban." The username may look nearly identical to a real moderator's handle, an added underscore, a swapped letter, or an appended number.

Step 3, The verification trap. The fake moderator instructs the user to follow a link to "verify" their account, leading to a convincing phishing clone of Reddit's login screen. Entered credentials go straight to the attacker.

Step 4, Account takeover or escalation. The attacker either hijacks the account or pivots to financial fraud, demanding a "verification fee," pushing crypto, or extracting personal information.

A loophole in Reddit's interface allowed scammers to make usernames visually appear as moderator-labeled accounts in certain display contexts, making impersonation nearly indistinguishable from the real thing.

Red flags:

• Moderators never DM users to "verify" accounts or resolve rule violations
• Real Reddit support comes through reddit.com/support, not DMs
• Any message creating urgency around bans or verification should be treated as suspect
• Check sending usernames carefully for lookalike characters

2. The giveaway and prize scam

A scammer posing as a brand, influencer, or popular community account DMs to congratulate you on "winning" a prize, cash, crypto, a gift card, or a product. There's just one catch: a small "processing fee," "tax," or "shipping cost" to claim it, or personal and financial details to "transfer your winnings."

Neither the prize nor the sender is real. Variations include impersonating well-known Reddit accounts, using purchased accounts with post history and karma to appear credible, and adding a "claim within 24 hours" deadline.

3. Romance and relationship scams

Subreddits focused on loneliness, dating, mental health, and life advice are fertile ground for romance scammers. A stranger slides into your DMs after engaging with your post, builds rapport over days or weeks (sharing personal stories, expressing affection, positioning themselves as uniquely understanding) and eventually makes a financial ask.

4. Pig butchering (investment / crypto scams)

Named for the practice of "fattening a pig before slaughter," these scams are a sophisticated hybrid of romance and investment fraud, and among the fastest-growing globally.

A friendly stranger reaches out via DM. Over weeks or months they build a relationship, mention their investment success in cryptocurrency, and offer to help you grow your money using a "special platform." The platform looks legitimate; early returns look impressive. The victim deposits more. Then withdrawal is blocked, the platform disappears, or new fees appear. The money is gone.

In a widely shared Reddit post, one victim described losing $400,000 this way: "These scammers are extremely calculated and prey on trust. Don't ever invest based on someone you met online, even if they seem 'well-connected.'"

5. Phishing links and credential harvesting

Phishing links in Reddit DMs are disguised as:

• Broken or "important" posts ("You need to see this before it gets deleted")
• Exclusive deals related to a user's interests
• Fake Reddit notification pages ("Your inbox is full, click here")
• Impersonated external services (crypto exchanges, PayPal, Discord)

Some phishing DMs reference the user's actual post history to appear relevant, dramatically increasing click-through rates.

6. Job and money mule scams

Users posting in subreddits about unemployment, side hustles, or financial stress are targeted with vague "job offers" via DM: "work from home, flexible hours, no experience needed, make $500/week." In some variations, the "job" involves receiving money transfers and forwarding them, a textbook money mule operation that leaves the victim legally exposed when law enforcement investigates.

The psychology behind why these scams work

Authority and urgency are the two most effective levers. When a fake "moderator" says your account is about to be banned, the instinct is to act fast, short-circuiting critical thinking.

Personalization makes scams feel real. A message referencing your username, a recent post in r/investing, or your active subreddit creates instant legitimacy. Scammers scrape public Reddit data to build these openers.

Trust built over time is the currency of romance and pig-butchering scams. The longer the relationship, the harder it is to believe it's fraudulent, victims often describe the realization as devastating precisely because they thought they knew the person.

Shame and embarrassment keep many victims silent. Fraud carries social stigma that discourages reporting, which is exactly what scammers count on.

7 red flags to watch for in Reddit DMs

1. Unsolicited messages from "moderators" or "Reddit admins", Legitimate Reddit staff never contact you via DM to resolve account issues. All official communication goes through reddit.com/message/messages or official email.
2. Urgency around bans, suspensions, or verification, Any message demanding immediate action to save your account is almost certainly fraudulent.
3. Requests to click external links, Especially links that don't resolve to reddit.com or well-known services.
4. Unsolicited investment advice or "opportunities", If a stranger DMs you about a "guaranteed" investment platform or crypto strategy, treat it as a scam.
5. Any request for money, gift cards, or crypto, Real prizes don't require processing fees. Real jobs don't ask you to forward money.
6. Usernames that almost look right, Scammers register accounts like "Reddit_Mod_Support" or slight variations of real moderator names. Always verify through the subreddit's public mod list.
7. Messages referencing your posts in an oddly flattering or specific way, Scammers research targets to make cold contact feel warm.

How to protect yourself on Reddit

Enable two-factor authentication (2FA). Your single most important defense. Even if a scammer captures your password via phishing, 2FA blocks account access. Enable it under Settings > Safety & Privacy > Use two-factor authentication.

Never click links in DMs from strangers. Navigate directly to any site by typing the address yourself. If a message claims your account needs action, go to Reddit's settings directly, don't follow a link.

Verify moderator identities independently. If a DM claims to be from a moderator, go to that subreddit and check the official mod list under "About" in the sidebar. Never trust a username in a DM as proof of identity.

Limit who can DM you. Under Settings > Safety & Privacy, restrict messages to people you follow or turn off chat requests entirely.

Keep personal information off your profile. Location, employer, financial situation, and relationship status are all used by scammers to craft convincing targeting.

Trust your instincts. If a message feels off (too good, too urgent, too flattering) it probably is.

Report suspicious accounts. Use Reddit's built-in tools to flag suspicious DMs, or report at reddit.com/report. If you've been defrauded, file a report with the FTC at ReportFraud.ftc.gov.

What to do if you've already been scammed

If you clicked a phishing link or entered credentials:

• Change your Reddit password immediately and revoke active sessions under Settings > Security
• Change passwords on any other accounts where you use the same credentials
• Enable 2FA on Reddit and any linked services
• Check for unauthorized access to email, financial accounts, or linked services
• Contact your bank if any financial information was shared

If you sent money:

• Contact your bank or payment provider immediately, some transactions can be reversed if caught quickly
• File a report with the FTC at ReportFraud.ftc.gov
• File a report with the Internet Crime Complaint Center (IC3) at ic3.gov

You are not alone and you are not at fault. These are highly engineered social attacks designed by people who study human psychology professionally.

Conclusion

Reddit's size and community-centric design make it genuinely valuable. But the same features that make it feel safe (shared interests, community identity, moderation structures) are precisely what scammers exploit to manufacture trust.

The fake moderator is not your ally. The stranger DM-ing you investment tips is not a lucky connection. The prize you didn't enter for does not exist.

The best defense is understanding how the machinery works. Now you do.

If you found this useful, share it with someone who uses Reddit. These tactics only work when they're kept in the dark.

Get a free security scan with Guardio today and stay protected from phishing links and scam messages.