I haven't experienced it myself, but with two reports in
this thread, I find this reliable enough to do a more visible warning to everyone.
Scammers are currently targetting users of this forum, stating that they've erroneously reported your account for fraud and that your account is going to be suspended as a result. You have to submit an appeal, ... and submit proof via Discord that you have committed no fraud.
This is a pure scam, attempting to get your personal information. The purposes for which they want this are unclear, but account take-over or directed phishing for higher value targets both sound plausible. As soon as you get this PM, block the user, and
report them to GOG support. Do NOT join the Discord you're directed to. Do NOT tell them any personal information.
If you have fallen for the scam already, take it as a learning opportunity, but do not feel bad about yourself. These are trained criminals, who keep improving their script, and you're far from alone in not being on your guard enough.
Do immediately:
- change your password if you've told them that
- enable two factor authentication if you haven't yet
- change the email address associated with your account if you can
- report that this happened (including what information you shared) to GOG support so they won't hand over your account to someone with all your personal information who says they lost their password/email
- be on the lookout for further scams, targetting you through email / phone, where they tell you some of the information you shared, as part of proving that they are who they say they are. (E.g. "your bank" calling you out of the blue.)