# Community and support security: protect announcements without becoming a recovery scam

Source: https://www.web3sec.news/blog/community-support-security-runbook
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Inventory effective moderator, bot and webhook permissions.
- [ ] Publish independently verifiable official support locations.
- [ ] Require review for wallet and payment link changes.
- [ ] Rehearse a malicious-post response in a private server.
- [ ] Revoke sessions and integrations, then review persistence.

## References
- [Discord: roles and permissions](https://support.discord.com/hc/en-us/articles/214836687-Discord-Roles-and-Permissions)
- [Discord: setting up multi-factor authentication](https://support.discord.com/hc/en-us/articles/219576828-Setting-up-Multi-Factor-Authentication)
- [Discord: compromised account response](https://support.discord.com/hc/en-us/articles/24160905919511-My-Discord-Account-was-Hacked-or-Compromised)