HoneyPot
The HoneyPot (or trap channel) of RaidProtect is a channel where no one should write. Since real members know to avoid this channel, the only ones who post in it are hacked accounts or spam bots: RaidProtect sanctions them automatically.
❓ How does it work?
When you enable the HoneyPot, RaidProtect creates a text channel at the very top of your server, with a clear randomly drawn name. This channel has three characteristics:
- Anyone can write in it, including members who haven't validated the captcha yet. This is intentional: a hacked account or a bot must not be able to avoid the trap.
- A warning message is posted when the channel is created, with a "Translate" button so each person can read it in their language.
- A public counter displays the number of accounts already caught by the trap, updated automatically.
As soon as a member posts in this channel:
- RaidProtect applies the sanction you have chosen (ban, softban, kick, timeout, jail or mute).
- The messages sent by this member in the past 10 minutes are deleted across the whole server, to stop the spam if it has already spread to other channels.
- The action is added to the auto-moderation logs (reason: Spam via compromised user account).
The HoneyPot works hand in hand with ScamLens, which deletes scam images without punishing the account. The HoneyPot, on the other hand, catches everything else: new scam images not yet known, link spam, text raids, bots.
🛠️ Setting up the HoneyPot
- Run the
/settingscommand. - Click on the "HoneyPot" button.
- Click on "Create the channel": RaidProtect creates the channel, sets up the permissions and posts the warning message.
Once the channel is created, you can:
- Regenerate the channel: deletes the old one and creates a new one (with a new name). Useful if you suspect a member has shared the trap channel name to help other accounts avoid it.
- Disable: deletes the channel and turns off the feature.
Choose the sanction
Several sanctions are available:
| Sanction | Effect | Availability |
|---|---|---|
| Ban | Excludes the member from the server and deletes their recent messages | Free |
| Softban | Bans then unbans: deletes the messages, but the member can come back | Free |
| Kick | Excludes the member, who can rejoin freely | Premium |
| Timeout | Prevents the member from speaking for a chosen time (max 28 days) | Premium |
| Jail | Assigns the Jail role configured on your server | Premium |
| Mute | Assigns the Mute role configured on your server | Premium |
For sanctions with a duration (Ban, Timeout, Jail, Mute), you can pick a ready-to-use duration (from 5 minutes to 28 days) or a custom duration via the dedicated button (e.g. 5m, 1h, 2d; minimum 1 minute).
Softban is a good compromise: it cleans up the messages and removes the hacked account, but the legitimate owner can come back once their account is secured.
Only Ban and Softban let Discord natively delete the hacked account's messages everywhere on the server in one shot. For the other sanctions (Kick, Timeout, Jail, Mute), RaidProtect has to perform a manual cross-channel deletion, which is much more costly on the bot side, so they are reserved for Premium servers.
Ignored members
You can choose who is not sanctioned when a message is posted in the HoneyPot:
- No one (default): everyone gets sanctioned, even staff. Only members the bot cannot moderate (role higher than RaidProtect's) are automatically spared.
- Staff: members with the
Administrator,Manage serverorManage channelspermission are not sanctioned. - Members ignored by Anti-spam: RaidProtect reuses the Anti-spam list. If the list is empty, it falls back to "Staff" mode.
In every case, RaidProtect never sanctions itself or other bots. Bots do not trigger the HoneyPot.
🤝 HoneyPot and ScamLens, better together
RaidProtect already includes ScamLens, which analyzes images and deletes the ones that are known scams (crypto, fake giveaways, fake casino promotions).
The two work hand in hand:
- ScamLens runs first. If the image posted in the HoneyPot is already known, it's deleted and the HoneyPot does not sanction.
- The HoneyPot takes over for everything else: new images not yet known, link spam, mass mentions, text raids, bots.
- Every new image caught by a HoneyPot enriches ScamLens, which can then block it across all protected servers.
ScamLens is already active by default on your server. Enabling the HoneyPot doesn't break anything: it simply complements what already exists, and helps RaidProtect protect the entire community better.