Email-change notification emails need a "that wasn't me!" button

A friend of mine lost access to his account from some ridiculous scam going around. When the account changed his email, all he got was a notification WITHOUT a means of changing it back within the email.

Most sites, including STEAM (which has the worst customer support on the planet behind Comcast), have a link in these emails that allows you to revoke the change for at least a day after it happens, if not 2-3.

There was no such function in the email my friend got, so effectively, Discord is missing a layer of security that is common practice on the internet. Especially since Discord is a service with subscriptions, I recommend adding this basic layer of protection for users against fraudulent email changes as soon as humanly possible.

評論