Skip to main content
Discord AutoMod can block a scam message and time the account out. It cannot ban. AutoMod Escalation is the missing step: when one of your AutoMod keyword rules catches a message that matches a confirmed scam pattern, Hashbot bans the account, removes everything it posted in the last hour, and posts an evidence card in your log channel. This is a premium feature and it is on by default for every activated server.
Only the confirmed scam pattern is ever banned automatically: an obfuscated link combined with a fake-support lure or obfuscation markers. We reviewed 400 real AutoMod hits by hand before turning this on: 0 false bans.

​
What it catches

The classic “fake support” copypasta and its variants:
Links chopped across lines, four slashes (:////), ideographic full stops instead of dots, @dis cord splits, [.] and (dot) forms. Hashbot scores every keyword hit for these signals plus context (Discord invite, brand-new account, joined in the last day, lure words and emoji). Anything that is suspicious but not the confirmed pattern is only reported if you turn on review alerts.

​
What you need

1

Give Hashbot the Manage Server permission

Discord only sends AutoMod events to bots that hold Manage Server. Open Server Settings, then Roles, select the Hashbot role, turn on Manage Server and save. The dashboard tells you when it is missing.
2

Have a keyword rule that catches the scam

Any AutoMod keyword rule works. If you have none, open the AutoMod Rules page on the dashboard and click Install the Obfuscated URL rule. It blocks the message before it posts, alerts your log channel, times the poster out for an hour, and hands the hit to Hashbot. Then switch on Enforce for that rule.
3

Set a log channel

Ban cards and review alerts go to your Hashbot log channel. Without one, Hashbot falls back to a DM to the server owner.

​
Switching enforcement on

Hashbot enforces nothing until you switch it on, rule by rule. On the AutoMod Rules page every keyword rule has an Enforce switch. Switch it on for the rules that catch scams (the Obfuscated URL rule, your scam-keyword rules); leave self-promo or profanity rules off. A rule that is disabled in Discord cannot enforce until you enable it there.

​
Punishment and review alerts

At the top of the AutoMod Rules page, the Escalation section has two controls:
  • Punishment: Ban (default) bans the confirmed pattern. Flag posts it to your log channel for a moderator to decide.
  • Review alerts: off by default. When on, Hashbot also posts suspicious hits that are not the confirmed pattern (members re-posting an invite, a link with a lure word). About 1 in 6 of those is a real scam, so most servers leave this off.

​
What happens on a ban

  1. The account is banned with the reason AutoMod Escalation: rule "<name>" matched "<keyword>"; <signals>; score <n>.
  2. Its messages from the last hour are deleted.
  3. A card lands in your log channel with the message, the rule, the keyword, the score breakdown, member context and a link to the ban log.
  4. The ban is in your dashboard ban log with a one-click Unban.
Staff, allowlisted members and members above Hashbot’s role are never banned. A server that bans more than 25 members through enforcement in 10 minutes is paused automatically and the owner is notified.

​
Slash commands

include-rule switches a rule on, exclude-rule switches it off.

​
Frequently asked

Will it ban my members? Only for the confirmed pattern, and only when your own AutoMod rule fired first. Uncertain hits never ban. Does it replace AutoMod? No. AutoMod still blocks the message; Hashbot finishes the job. I disagree with a ban. Open the ban log from the card and click Unban. If you think the pattern is wrong, tell us in the Hashbot server with the hit number from the card.