> ## Documentation Index
> Fetch the complete documentation index at: https://hashbot.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# AutoMod Escalation

> Turn Discord AutoMod timeouts into bans for confirmed scam patterns, with evidence and a one-click unban.

Discord AutoMod can block a scam message and time the account out. It cannot ban. AutoMod Escalation is the missing step: when one of your AutoMod keyword rules catches a message that matches a confirmed scam pattern, Hashbot bans the account, removes everything it posted in the last hour, and posts an evidence card in your log channel. This is a premium feature and it is on by default for every activated server.

<Check>
  Only the confirmed scam pattern is ever banned automatically: an obfuscated link combined with a fake-support lure or obfuscation markers. We reviewed 400 real AutoMod hits by hand before turning this on: 0 false bans.
</Check>

### What it catches

The classic "fake support" copypasta and its variants:

```
Submit your questions / issues below
> **><ht
> tp
> ://di
> sco
> rdapp。
> com\invite\xxxxxxx>>**
```

Links chopped across lines, four slashes (`:////`), ideographic full stops instead of dots, `@dis cord` splits, `[.]` and `(dot)` forms. Hashbot scores every keyword hit for these signals plus context (Discord invite, brand-new account, joined in the last day, lure words and emoji). Anything that is suspicious but not the confirmed pattern is only reported if you turn on review alerts.

### What you need

<Steps>
  <Step title="Give Hashbot the Manage Server permission">
    Discord only sends AutoMod events to bots that hold **Manage Server**. Open **Server Settings**, then **Roles**, select the **Hashbot** role, turn on **Manage Server** and save. The dashboard tells you when it is missing.
  </Step>

  <Step title="Have a keyword rule that catches the scam">
    Any AutoMod keyword rule works. If you have none, open the **AutoMod Rules** page on the dashboard and click **Install the Obfuscated URL rule**. It blocks the message before it posts, alerts your log channel, times the poster out for an hour, and hands the hit to Hashbot. Then switch on **Enforce** for that rule.
  </Step>

  <Step title="Set a log channel">
    Ban cards and review alerts go to your Hashbot [log channel](/docs/log-channel). Without one, Hashbot falls back to a DM to the server owner.
  </Step>
</Steps>

### Switching enforcement on

Hashbot enforces nothing until you switch it on, rule by rule. On the **AutoMod Rules** page every keyword rule has an **Enforce** switch. Switch it on for the rules that catch scams (the Obfuscated URL rule, your scam-keyword rules); leave self-promo or profanity rules off. A rule that is disabled in Discord cannot enforce until you enable it there.

### Punishment and review alerts

At the top of the **AutoMod Rules** page, the Escalation section has two controls:

* **Punishment**: **Ban** (default) bans the confirmed pattern. **Flag** posts it to your log channel for a moderator to decide.
* **Review alerts**: off by default. When on, Hashbot also posts suspicious hits that are not the confirmed pattern (members re-posting an invite, a link with a lure word). About 1 in 6 of those is a real scam, so most servers leave this off.

### What happens on a ban

1. The account is banned with the reason `AutoMod Escalation: rule "<name>" matched "<keyword>"; <signals>; score <n>`.
2. Its messages from the last hour are deleted.
3. A card lands in your log channel with the message, the rule, the keyword, the score breakdown, member context and a link to the ban log.
4. The ban is in your dashboard ban log with a one-click **Unban**.

Staff, allowlisted members and members above Hashbot's role are never banned. A server that bans more than 25 members through enforcement in 10 minutes is paused automatically and the owner is notified.

### Slash commands

`include-rule` switches a rule on, `exclude-rule` switches it off.

```
/settings automod-escalation set-state state:enable
/settings automod-escalation set-punishment punishment:ban
/settings automod-escalation set-review-alerts state:disable
/settings automod-escalation include-rule rule-id:<id>
/settings automod-escalation exclude-rule rule-id:<id>
```

### Frequently asked

**Will it ban my members?** Only for the confirmed pattern, and only when your own AutoMod rule fired first. Uncertain hits never ban.

**Does it replace AutoMod?** No. AutoMod still blocks the message; Hashbot finishes the job.

**I disagree with a ban.** Open the ban log from the card and click Unban. If you think the pattern is wrong, tell us in the Hashbot server with the hit number from the card.
