Security: Fake Anthropic Discord links directing users to crypto phishing site (collab.labs-land.com)
Security Report
Severity: High — users are being directed to a crypto wallet-draining site believing it is the official Anthropic Discord.
What happened
A Claude Code user (myself) was directed to collab.labs-land.com via a link found on social media. The site presented itself as an Anthropic community access page. It displayed:
- A Collab.Land wallet connection UI
- Options to connect MetaMask, WalletConnect, Phantom, Solana and other crypto wallets
- A banner reading '🚀 Metamask Token incoming'
This is a classic crypto phishing pattern. Connecting a wallet to this site can result in asset theft.
Screenshot evidence
The URL was: collab.labs-land.com/collab/?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
The page showed wallet connection options including MetaMask, WalletConnect, Rabby Wallet, Solflare, Phantom, Solana, Dapper, TRON, ImmutableX, TokenProof, ZenGo, Eluvio and others.
How users are reaching this page
Misleading social media posts (Instagram, Facebook) about Claude tools and communities are directing users to this site. The same ecosystem of misleading influencer content that spreads false information about Claude Code and Claude Design is apparently also spreading phishing links.
Risk
Any Claude user who:
- Sees a post about 'joining the Anthropic/Claude community'
- Clicks the link
- Connects their crypto wallet
...could lose their crypto assets.
Recommended actions for Anthropic
- Publish an official warning on all Anthropic social channels that the only official Discord is
discord.gg/anthropicand it does NOT require wallet connection - Report the phishing site to domain registrar and Collab.Land platform
- Pin a message in the official Discord clarifying there is no token-gating or wallet requirement
- Monitor for fake Anthropic community links on social platforms
Official Discord
The real Anthropic Discord is: discord.gg/anthropic
It requires NO wallet connection, NO MetaMask, NO crypto tokens.
Related context
This is part of a broader pattern of misleading content about Claude tools on social media — influencers posting false information about Claude Code, Claude Design, and now fake community links. See also issue #49631 (VS Code visibility) for context on this user's experience.
Environment
- Platform: Web browser (Chrome)
- OS: macOS
- User type: Max plan subscriber, active Claude Code user
- Discovery: Via social media link (Instagram/Facebook ecosystem)
11 Comments
Update: The link
discord.gg/anthropic— which I (Claude) provided to a user as the official Anthropic Discord — appears to redirect to this Collab.Land phishing page. This is now a higher severity issue: Claude itself may be giving users a wrong/expired/compromised Discord invite link that leads directly to a crypto wallet-draining site. Anthropic should verify whetherdiscord.gg/anthropicis the correct current invite link, and if not, ensure Claude's training data is updated with the correct link.Further update with screenshots:
User reached the REAL Anthropic Discord server (confirmed 'Welcome to Anthropic' header in #verify-here). However the Collab.Land verification bot in the server is showing a suspicious OAuth redirect:
'Once you authorise, you will be redirected outside Discord to: https://a-redirect.com'**
This redirect domain (a-redirect.com) is NOT a legitimate Collab.Land domain. Real Collab.Land redirects to collab.land. This suggests either:
The bot was 'Active since 24 Mar 2026' which is very recent.
Recommended immediate action: Anthropic should audit the Collab.Land bot in the official Discord server and verify whether the OAuth app redirecting to https://a-redirect.com is legitimate. If not, remove it immediately as it could be harvesting Discord credentials from users trying to verify in the Anthropic community server.
User did NOT authorise and did NOT connect a wallet. No compromise occurred.
Critical update — likely FAKE server:
The Discord server has only 708 members, 55 online. Anthropic has millions of users globally. A legitimate official Anthropic Discord would have tens of thousands of members minimum.
Combined with:
This appears to be a fake Discord server impersonating Anthropic, designed to harvest Discord OAuth credentials and/or drain crypto wallets.
The discord.gg/anthropic invite link may be pointing to this fake server, not a real Anthropic server.
Immediate actions requested from Anthropic:
User is safe — did not authorise or connect wallet. But other users may not be as cautious.
This is a high-priority security and brand impersonation issue.
Full Evidence Summary — Please treat as HIGH PRIORITY
What we confirmed from screenshots
The server looks legitimate on the surface:
But the numbers are wrong for a real Anthropic server:
The verification flow is dangerous:
The phishing URL structure
The Collab.Land URL contains:
This is a harvesting mechanism.
What Claude did wrong
I gave the user discord.gg/anthropic as 'the official Anthropic Discord' from training data. This link led to this server. Whether this server is real-but-compromised or fake-but-convincing, Claude sending users there is a security issue. My training data for 'Anthropic Discord link' needs to be verified and corrected.
Requested actions (prioritised)
User status
Safe — did not authorise OAuth, did not connect wallet. Flagged immediately and reported here.
This was discovered by a Max plan subscriber actively using Claude Code for production work and preparing a hackathon submission for 'Built with Opus 4.7' this week.
⚠️ REQUESTING TRIAGE — area:security area:auth
This issue needs urgent attention from the Anthropic security team. A user was directed by Claude itself (via a discord.gg/anthropic link in Claude's responses) to a Discord server running a crypto wallet phishing flow.
The server ID is: 1424234094283460761
Whether this is a fake impersonator server or a real-but-compromised Anthropic server, Claude is actively sending users into a phishing trap. This needs same-day review.
Please label this
area:securityand escalate to whoever handles brand impersonation and user safety.cc @anthropics/claude-code-team
Staff escalation + correction
cc @bcherny @igorkofman @ashwin-ant — please review urgently.
Key correction from research
The link
discord.gg/anthropicis NOT the official Anthropic Discord and is not published anywhere on anthropic.com. The real server isdiscord.com/invite/6PPFFzqPDZ(86,983 members, linked from anthropic.com/discord).The server this user joined (ID: 1424234094283460761, 708 members) is a fake impersonation server — confirmed by:
a-redirect.com(not collab.land)What Claude did wrong
I gave a user
discord.gg/anthropicas 'the official Anthropic Discord.' This link leads to a fake phishing server. Claude's training data contains a wrong/dangerous Discord link. This needs to be corrected urgently — Claude is actively sending users into a phishing trap.Actions already taken by the user
Recommended next steps for Anthropic team
a-redirect.comto Google Safe Browsingdiscord.gg/anthropic, replace withdiscord.com/invite/6PPFFzqPDZ🚨 ESCALATION UPDATE — Scam operation is actively intercepting reports
New development: After filing this issue, the user received a GitHub notification from a fake repo (
nakarimthirsts/Support, issue #128). The scam operators:roniamestefanGitHub.interact@gmail.com(not a GitHub email — @gmail.com = scam)This means the scam operation is actively monitoring GitHub for reports about their phishing activity and running interference. This is a coordinated, sophisticated operation — not a single scam page.
Additional actions needed:
nakarimthirsts/Supportrepo to GitHub Trust & Safety for impersonation + fraudroniamestefanto GitHub for coordinated scam activityGitHub.interact@gmail.comaddress should be reported to Google as phishingThe user did NOT click any links and is safe.
This is now a multi-layered coordinated scam targeting Anthropic users. Please treat as critical priority. cc @bcherny @igorkofman @ashwin-ant
Closing for now — inactive for too long. Please open a new issue if this is still relevant.
Disappointing that nobody at Anthropic takes this seriously.
This is sad. I reported and blocked it. It wants your crypto as authorization. This is really scary and serious.
This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.