> ## Documentation Index
> Fetch the complete documentation index at: https://discovercardknowledgedesk.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Spot Phishing Scams Targeting Discover Card Users

> Learn to recognize fake Discover login pages, phishing emails, and fraudulent texts so you can protect your account and know what to do if you slip.

[Get Started Here
→](<https://flosyr.com/?kjpyyo1wIHMxyYn6ddJHjpF8hQJiflFKAMa5VzkrSOYI3snlEzYa3mabFKnB73N  >)

By the Knowledge Desk Team\
October 10, 2026

> [!NOTE]
>
> This Knowledge Desk is an independent guide and is not affiliated with Discover. Always log in only at the official site, [https://www.discover.com](https://www.discover.com), or the official Discover mobile app.

Phishing scams try to trick you into entering your Discover login details on a fake website or sharing them by email or text. Learning the warning signs helps you stop scammers before they gain access to your account.

## Common phishing signs

> **Fake login pages**
>
> Scammers create websites that look nearly identical to the real Discover login page. Before you enter your User ID or password, check the address bar. The official site is [**https://www.discover.com**](https://www.discover.com). Look for the padlock icon and make sure the URL is spelled correctly. Misspellings like "discover-secure.com" or "discover-login.net" are red flags.

> **Urgent emails and texts**
>
> Phishing messages often claim your account is locked, a suspicious charge was detected, or you need to verify information immediately. They pressure you to click a link or call a strange number. Discover will not send unsolicited messages asking for your password or one-time code.

> **Lookalike sender addresses**
>
> Check the sender email carefully. A scammer might use "[support@discover-alerts.com](mailto:support@discover-alerts.com)" instead of an official discover.com address. When in doubt, do not click. Open your browser and type [www.discover.com](http://www.discover.com) manually.

> **Unexpected attachments**
>
> Legitimate account alerts from Discover rarely include attachments. Be cautious of PDFs or zip files in unexpected messages, especially if they ask you to enable macros or download software.

## What to do if you entered details on a fake site

**1. Change your password immediately**

Log in at the real Discover website and update your password to something strong and unique. If you cannot log in, use the **Forgot User ID or Password** link on the homepage.

**2. Contact Discover**

Call the customer service number printed on the back of your card or listed on the official discover.com website. Tell them you may have given your login details to a fraudulent site.

**3. Enable two-step verification**

If it is not already on, turn on two-step verification in your account settings. This adds a barrier even if someone has your password.

**4. Monitor your statements**

Review recent transactions and statements for unfamiliar charges. Report anything suspicious to Discover right away.

> [!WARNING]
>
> Never share your password, one-time code, card number, or Social Security number in response to an unsolicited phone call, text, or email. Discover will never ask for your password or verification code out of the blue.

## Related articles

* [Secure login tips](/blog/secure-login-tips)
* [Reset your password](/account/reset-password)
* [Forgot your User ID](/account/forgot-user-id)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.