Yes, the real Invite Tracker bot is safe to use. Discord's App Directory lists it as a verified app in about 2.15 million servers (October 2026), and the permissions it asks for match what it does. The real risk is fake copies: scammers run look-alike "Invite Tracker" bots and websites to steal Discord accounts, so check the bot's ID and only ever verify on invite-tracker.com.
This guide covers what the bot actually does, each permission it requests and the reason its own docs give, how to confirm you have the genuine bot, and how to set it up so a mistake costs you as little as possible.
What Invite Tracker does
Invite Tracker's site describes it plainly: it "counts every invite and shows you exactly who brings people to your server, then helps you welcome them and keep them engaged." Around that core it also runs giveaways, invite and message leaderboards, a verification system, raid protection and support tickets.
Invite counting is the bot's core job. Discord lets a bot with the Manage Server permission read a server's list of active invites, including how many times each one has been used. Invite trackers in general compare those numbers before and after someone joins to work out which link they came through, then credit the person who created it. Invite Tracker's leaderboard export splits each member's total into regular invites, invites where the person later left, invites flagged as fake, and bonus invites added by staff.
Its FAQ lists a few cases where an invite will not count:
- The server uses a verification step and the new member has not finished it yet
- The inviter is blacklisted from counting
- The bot is missing Manage Server
- The inviter did not create the link themselves
- The link never registered with the bot (making a new one can fix this)
- The server's vanity URL was used, since vanity links are not trackable invites
The permissions it asks for, and why
These come from Invite Tracker's own FAQ. Its docs also say the bot "by default only asks for the permissions required for it to work" and warn that removing them can break features.
| Permission | Why Invite Tracker says it needs it |
|---|---|
| Manage Server | To view the server's active invites so it can track them |
| Manage Roles | For tickets and role assignments, such as invite reward roles |
| Manage Channels | For ticket management and invite tracking |
| Kick Members, Ban Members | To enforce its verification system |
| View Channels, Send Messages | Core functionality |
| Embed Links, Attach Files | Leaderboards and statistics |
| Read Message History | Editing pinned leaderboards and saving ticket transcripts |
Manage Server, Manage Roles, Manage Channels, Kick Members and Ban Members are what Discord's developer docs call elevated permissions: on a server that requires two-factor authentication for moderation, they only work if the bot owner's account has 2FA turned on. They are powerful, which is true of every moderation or ticket bot. That is not a sign Invite Tracker is doing anything wrong. It is a reason to only add bots you have checked, and to place their role carefully (more on that below).
Is Invite Tracker legit? What the record shows
A few things you can check yourself:
- It is a verified app. Discord requires any app to be verified before it can grow past 100 servers, and verification includes the developer team's owner confirming their identity through Stripe. A bot in millions of servers has passed that check. Verification tells you who is accountable for the bot. It does not promise the bot is harmless, so it is one signal among several.
- Its official identifiers are published. The FAQ gives the real bot's ID as
720351927581278219and its tag asInvite Tracker#0478. - Its docs are public. Setup, commands and the FAQ are at docs.invite-tracker.com, and the site publishes a privacy policy.
- You can see what it can access. On desktop or in the browser, open the bot's profile inside your server and click the Data Access tab. Discord also lists the baseline data every bot in a server can see: members' usernames, avatars and nicknames, their roles, message metadata such as when a message was sent, voice channel activity, reactions, and language settings.
The real risk: fake Invite Tracker bots and sites
Invite Tracker's FAQ warns that "malicious actors are running bots and websites that are impersonating Invite Tracker to steal Discord accounts." According to the same FAQ, the real bot will never ask you to:
- Scan a QR code
- Drag a bookmark into your browser bar
- Sign in with a crypto wallet
- Download a file
- Use any other unofficial verification method
If verification is needed, it happens on invite-tracker.com and nowhere else. A "verify" link in your DMs, a lookalike domain, or a bot with the right name but a different ID are all signs of a fake.
How to check the bot's ID: turn on Developer Mode in User Settings, then Advanced. Right-click the bot (on mobile, tap it and open the menu in the top-right corner) and choose Copy User ID. It should be 720351927581278219.
If you are a member of a server that uses it
Being in a server with Invite Tracker is no different from being in a server with any other popular bot. It sees the same baseline server data Discord gives every bot, and Discord's list of that data covers the server, not your private conversations with other people.
If the server asks you to verify through Invite Tracker:
- Use the link or button in the server's own verification channel, not one sent to you in a DM.
- Check the address is invite-tracker.com before you do anything.
- If you are asked to sign in to Discord, that step should be on discord.com itself. Never type your Discord password into any other site.
- If anything asks for a QR scan, a download or a wallet, close it and tell the server's staff.
If you think you authorized something you should not have, open User Settings, then Authorized Apps, and remove it. If your account was taken over, Discord's support article "My Discord Account was Hacked or Compromised" has the recovery steps.
Safer setup for server owners
- Add it from an official source. Use Discord's App Directory or invite-tracker.com, never a link someone sends you.
- Read the permission screen. The authorization screen lists every permission before you confirm. If you will never use its verification system, you can untick Kick Members and Ban Members, accepting that the related features will not work.
- Place its role below your staff roles. Discord does not let a member, or a bot, kick, ban or change the nickname of anyone whose role is equal to or higher than its own. Keeping the bot's role under your moderators limits what it could ever do to them.
- Require 2FA for moderation. With server-wide 2FA on, elevated permissions only work for accounts and bot owners that have 2FA enabled.
- Watch the audit log. It records role, channel and ban changes and who made them. Our guide to checking the Discord audit log shows where to look.
- Remove it if you stop using it. Right-click the bot in the member list and kick it. Fewer bots with fewer permissions is the simplest security setting there is.
For a broader checklist that applies to any bot, see how to tell if a Discord bot is safe.
If you would rather keep invite tracking inside a bot you already run for other jobs, PeakBot includes an invite tracker that shows who invited whom alongside its moderation, XP and ticket tools (see the feature list). If you are comparing options, our roundup of InviteTracker and InviteManager alternatives covers several.
Frequently asked questions
Is Invite Tracker a virus?
No. A Discord bot runs on its developer's servers and talks to Discord through Discord's API. Adding it to a server installs nothing on your computer or phone. The danger is a fake verification page that asks you to download a file, which the real Invite Tracker never does.
Can Invite Tracker read my DMs?
Discord's description of what bots in a server can access covers server data such as usernames, roles, message metadata and voice activity. It does not include your private messages with other people. Check the bot's Data Access tab in your server to see exactly what it has been granted there.
Why are my invites not counting?
The most common reasons from Invite Tracker's FAQ: the server's verification step has not been completed by the new member, the bot lacks Manage Server, the person joined through the vanity URL, or the link was created by someone else. Creating a fresh invite link often fixes a link that never registered.
Is Invite Tracker free?
Yes, the core invite tracking is free. The docs describe a Premium tier that unlocks extra features and raises limits on the free ones, with details on invite-tracker.com/premium.
How do I know the Invite Tracker in my server is the real one?
Copy its user ID with Developer Mode and compare it with 720351927581278219. Any other ID is not the official bot, whatever its name and avatar look like.
