Skip to main content
By the Knowledge Desk Team
October 10, 2026
This Knowledge Desk is an independent guide and is not affiliated with Discover. Always log in only at the official site, https://www.discover.com, or the official Discover mobile app.
Phishing scams try to trick you into entering your Discover login details on a fake website or sharing them by email or text. Learning the warning signs helps you stop scammers before they gain access to your account.

​
Common phishing signs

Scammers create websites that look nearly identical to the real Discover login page. Before you enter your User ID or password, check the address bar. The official site is https://www.discover.com. Look for the padlock icon and make sure the URL is spelled correctly. Misspellings like “discover-secure.com” or “discover-login.net” are red flags.
Phishing messages often claim your account is locked, a suspicious charge was detected, or you need to verify information immediately. They pressure you to click a link or call a strange number. Discover will not send unsolicited messages asking for your password or one-time code.
Check the sender email carefully. A scammer might use “support@discover-alerts.com” instead of an official discover.com address. When in doubt, do not click. Open your browser and type www.discover.com manually.
Legitimate account alerts from Discover rarely include attachments. Be cautious of PDFs or zip files in unexpected messages, especially if they ask you to enable macros or download software.

​
What to do if you entered details on a fake site

1

Change your password immediately

Log in at the real Discover website and update your password to something strong and unique. If you cannot log in, use the Forgot User ID or Password link on the homepage.
2

Contact Discover

Call the customer service number printed on the back of your card or listed on the official discover.com website. Tell them you may have given your login details to a fraudulent site.
3

Enable two-step verification

If it is not already on, turn on two-step verification in your account settings. This adds a barrier even if someone has your password.
4

Monitor your statements

Review recent transactions and statements for unfamiliar charges. Report anything suspicious to Discover right away.
Never share your password, one-time code, card number, or Social Security number in response to an unsolicited phone call, text, or email. Discover will never ask for your password or verification code out of the blue.