Skip to main content

The new Discord's bot verification flow

On June 11th 2026, the Discord staff team has posted an announcement that caused many a lot of stress.

Discord Developers - bot verification update screenshot

Here's a link to their developer help center about the update.

TL;DR: They want you to verify your bot, not if it's in over 100 servers, but when it serves over 10,000 members.

What does it mean?

If your own Discord server has over 10k members, you need to give up your personal ID and get the bot verified. Even if you don't plan to make the bot public or share it with others.

And to make it even more fun, you then also need to apply for gateway intents, e.g. MESSAGE_CONTENT intent, which is required for most of the bots out there, and especially for marCloudBackup or other security bots that need to analyze user messages.

Why this is bad?

Some bots avoid going through the verification process for privacy reasons, and run in a "bot as a service" model. The customer supplies a bot provider with their own token, and the service runs them their own instance of the bot, under their own Discord bot instance.

This allowed users to run their own private bots, without the need to share any personal information, and risking it getting breached (it did).

Discord Blog post about them breaching 70k government issued IDs linked to Discord accounts

Sharing such information online should never be considered something "normal". It is obvious that if something can be used for a bad purpose, it eventually will. In this case, it was breached to the public.

But in some other cases, companies like Palantir build surveillance profiles for every citizen based on data. One could say, that 1984 was just a book. But nowadays, it feels like some people took it as a manual.

My mom always said: "never share any personal info online". She was so right.

Future plans?

We don't know yet.

Join our Discord server to share your thoughts: https://discord.gg/yaftWcn