Been building and locking down Discord servers for streamers for a while now, and the same 3 mistakes show up constantly:

1. @everyone can create invites.

This is how raiders get in over and over — someone's alt account (or a compromised member) drops a fresh invite link in a random Discord, and suddenly you've got 50 bots joining in 10 seconds. Lock invite creation down to mods only, day one.

2. No account age / verification gate.

If your server allows brand-new Discord accounts to join and talk immediately, you are a target. A basic verification step (even just "react to verify" + a minimum account age filter) kills the vast majority of raid bots before they can post.

3. Bot permissions are way too broad.

People add a moderation bot or music bot and just grant Administrator because it's easier. Then that bot's token gets leaked or the bot gets compromised, and now someone has full admin over your server. Give every bot the minimum permissions it needs to function — nothing more.

If you're setting up a new server or already got hit by a raid, happy to answer questions below. This is genuinely what I spend my days doing.