HAF Bot Docs

Appearance

Bot Defense ​

Bot Defense watches new messages for bot-like behaviour and sends evidence-backed flags to a staff review queue. Moderators decide whether the account is actually suspicious; HAF does not automatically ban members.

Availability

The Honeypot Detector and review workflow are available on every plan. The Rate Detector requires Premium or Premium Plus.

Bot Defense can reply with a warning, delete the triggering message, or do both. Configure those actions separately for each detector.

It does not automatically ban, kick, time out, or change roles. Selecting Confirm Bot records the moderator's decision only. Staff apply any account-level action separately in Discord.

Bot Defense dashboard with detection and review setup numbered

  1. Detection signals — Honeypot Detector, Rate Detector, or both.
  2. Honeypot channels — channels where ordinary members should never post.
  3. Review queue — private channel and roles that can resolve flags.

Quick Setup ​

Open Admin Dashboard → Bot Defense.

  1. Enable the Honeypot Detector, Rate Detector, or both.
  2. For Honeypot, use Set up channel or select clearly marked trap channels.
  3. Choose whether each detector warns, deletes, does both, or only raises a flag.
  4. Select a private Review Queue.
  5. Select the roles allowed to confirm or dismiss flags. Leave this empty for Guild admins only.
  6. Optionally exclude trusted roles and notify reviewers.
  7. Save.

Test the Honeypot with a non-admin test account. Confirm the flag appears and only the configured reviewers can resolve it.

Honeypot Detector ​

The Honeypot Detector flags members who post in a channel where legitimate members should never post.

The recommended Set up channel action creates or repairs #do-not-post, adds a clear warning, keeps it writable so automated accounts can trip it, and hides it from configured excluded roles.

New or untrusted members must still be able to see the channel for the detector to work.

Do not use a normal chat, rules, welcome, or Forum channel as a honeypot. Forum posts are ignored.

The configured warning and deletion actions run for every honeypot message, even while that member already has an unresolved flag.

Rate Detector ​

The Rate Detector flags a member who repeats the same message across too many different channels within a short period. It targets compromised accounts spreading identical phishing or crypto-scam messages.

Case, full-width Unicode, and whitespace-only differences are ignored when messages are compared. HAF stores a SHA-256 fingerprint for the comparison window rather than the full message text. Empty and attachment-only messages do not count.

Configure:

  • the number of different channels;
  • the time window in seconds; and
  • excluded roles.

A practical starting point is 5 matching messages across different channels within 60 seconds. Adjust it after reviewing real flags from your server.

Warning and deletion actions run for each message at or above the threshold.

Review Queue ​

Each item shows the detector, member, and available message/channel evidence.

Reviewers choose:

  • Confirm Bot — the evidence supports the flag; or
  • Dismiss — the flag is not useful or is a false positive.

Once resolved, the queue buttons are disabled and the decision is recorded. Confirmation does not apply a Discord punishment.

  1. Start the Rate Detector at 5 channels / 60 seconds.
  2. Use Set up channel for Honeypot.
  3. Exclude trusted staff, integrations, and long-standing member roles where appropriate.
  4. Watch the queue for several days before using confirmed flags in an enforcement policy.
  5. Raise the threshold when ordinary members are regularly flagged.
  6. Document what moderators should do after confirming a flag.

What Is Ignored ​

Bot Defense ignores:

  • messages from bots;
  • webhook-authored messages;
  • members with an excluded role; and
  • Forum posts for Honeypot detection.

Troubleshooting ​

  • No flags: Confirm a detector is enabled and the configuration is saved.
  • Flags exist but staff cannot see them: Select a Review Queue and grant HAF access.
  • Staff cannot resolve flags: Add their Review Role or use a Guild administrator.
  • Too many ordinary members are flagged: Raise the channel threshold, shorten the time window, or exclude a suitable trusted role.
  • Reviewers are not notified: Add a Review Role and enable notifications.

Use Setup check after saving to inspect detector channels, the Review Queue, roles, and permissions. It does not send a message, trigger a detector, delete content, or create a flag.