Discord error 240000: Message blocked by harmful links filter

Discord's platform-wide malicious link protection flagged a URL in your message and refused to deliver it. Unlike AutoMod (codes 200000/200001), this filter is run by Discord itself, not configured by server moderators, and it cannot be exempted per role. It targets known phishing domains, malware hosts and scam patterns, and the list changes constantly.

Bots encounter it when they relay user-submitted links, post results from a link shortener or aggregator, or when a legitimate domain the bot uses has been compromised or recently flagged. Occasionally a newly registered domain you own is caught by heuristics. Discord does not say which URL matched; you have to infer it from the message content.

{
  "message": "Message blocked by harmful links filter",
  "code": 240000
}

Treat any outbound URL from untrusted input as something to validate or wrap. Keep your own domains clean (HTTPS, no open redirects) so they do not attract heuristic flags, and handle 240000 as a user-facing "that link cannot be posted" rather than an exception.

Log the URLs that were present when 240000 fired so you can spot a recurring domain, and rate-limit users who repeatedly trigger it, since they may be testing your bot as a relay for spam.

Unlike AutoMod, there is no exemption to request and no rule to tune; the only lever is the links you send. Guild-configurable filtering, which you can inspect and reason about, produces 200000 instead, and the AutoMod budgets behind that are on the Discord limits page.