Skip to main content
Version: Beta 🚧

HoneyPot

The HoneyPot (or trap channel) of RaidProtect is a channel where no one should write. Since real members know to avoid this channel, the only ones who post in it are hacked accounts or spam bots: RaidProtect sanctions them automatically.

❓ How does it work?

When you enable the HoneyPot, RaidProtect creates a text channel at the very top of your server, with a clear randomly drawn name. This channel has three characteristics:

  • Anyone can write in it, including members who haven't validated the captcha yet. This is intentional: a hacked account or a bot must not be able to avoid the trap.
  • A warning message is posted when the channel is created, with a "Translate" button so each person can read it in their language.
  • A public counter displays the number of accounts already caught by the trap, updated automatically.

As soon as a member posts in this channel:

  • RaidProtect applies the sanction you have chosen (ban, softban, kick, timeout, jail or mute).
  • The messages sent by this member in the past 10 minutes are deleted across the whole server, to stop the spam if it has already spread to other channels.
  • The action is added to the auto-moderation logs (reason: Spam via compromised user account).
info

The HoneyPot works hand in hand with ScamLens, which deletes scam images without punishing the account. The HoneyPot, on the other hand, catches everything else: new scam images not yet known, link spam, text raids, bots.

🛠️ Setting up the HoneyPot

  1. Run the /settings command.
  2. Click on the "HoneyPot" button.
  3. Click on "Create the channel": RaidProtect creates the channel, sets up the permissions and posts the warning message.

Once the channel is created, you can:

  • Regenerate the channel: deletes the old one and creates a new one (with a new name). Useful if you suspect a member has shared the trap channel name to help other accounts avoid it.
  • Disable: deletes the channel and turns off the feature.

Choose the sanction

Several sanctions are available:

SanctionEffectAvailability
BanExcludes the member from the server and deletes their recent messagesFree
SoftbanBans then unbans: deletes the messages, but the member can come backFree
KickExcludes the member, who can rejoin freelyPremium
TimeoutPrevents the member from speaking for a chosen time (max 28 days)Premium
JailAssigns the Jail role configured on your serverPremium
MuteAssigns the Mute role configured on your serverPremium

For sanctions with a duration (Ban, Timeout, Jail, Mute), you can pick a ready-to-use duration (from 5 minutes to 28 days) or a custom duration via the dedicated button (e.g. 5m, 1h, 2d; minimum 1 minute).

tip

Softban is a good compromise: it cleans up the messages and removes the hacked account, but the legitimate owner can come back once their account is secured.

info

Only Ban and Softban let Discord natively delete the hacked account's messages everywhere on the server in one shot. For the other sanctions (Kick, Timeout, Jail, Mute), RaidProtect has to perform a manual cross-channel deletion, which is much more costly on the bot side, so they are reserved for Premium servers.

Ignored members

You can choose who is not sanctioned when a message is posted in the HoneyPot:

  • No one (default): everyone gets sanctioned, even staff. Only members the bot cannot moderate (role higher than RaidProtect's) are automatically spared.
  • Staff: members with the Administrator, Manage server or Manage channels permission are not sanctioned.
  • Members ignored by Anti-spam: RaidProtect reuses the Anti-spam list. If the list is empty, it falls back to "Staff" mode.
info

In every case, RaidProtect never sanctions itself or other bots. Bots do not trigger the HoneyPot.

🤝 HoneyPot and ScamLens, better together

RaidProtect already includes ScamLens, which analyzes images and deletes the ones that are known scams (crypto, fake giveaways, fake casino promotions).

The two work hand in hand:

  • ScamLens runs first. If the image posted in the HoneyPot is already known, it's deleted and the HoneyPot does not sanction.
  • The HoneyPot takes over for everything else: new images not yet known, link spam, mass mentions, text raids, bots.
  • Every new image caught by a HoneyPot enriches ScamLens, which can then block it across all protected servers.

ScamLens is already active by default on your server. Enabling the HoneyPot doesn't break anything: it simply complements what already exists, and helps RaidProtect protect the entire community better.