Deletes the MrBeast casino scam in under a second.

A hacked account dumps 4 fake "MrBeast crypto casino" images into every channel. Beast Hunter spots them, deletes them, times the account out and tells its owner what to do next to secure their account.

I built Beast Hunter because I got tired of banning and unbanning everyone whose account got hijacked, just to clear their spam out of the server.

When it catches one

A hacked account usually posts the scam in every channel it can reach. Beast Hunter treats that whole burst as one incident.

  • The posts are deleted. The first one, and every copy the same account posts over the next 5 minutes.
  • The account is timed out for 60 minutes by default, so it can't keep going. You can set anything from 0 minutes to 28 days.
  • The owner gets a DM saying their account is compromised and how to secure it: a new password, 2FA, removing unknown authorized apps and a malware scan.

If you want, it can also post a report to your mod channel, and a public "Another beast bites the dust." message. When several accounts get caught in a row, that message counts up ("x3 combo") instead of piling up.

The DM Beast Hunter sends: your account just posted known scam images and is very likely compromised, followed by steps to secure it and how accounts usually get stolen
The DM the account owner gets.

How it recognizes the scam

It only looks at messages with exactly 4 images, forwarded ones included. Everything else is skipped without downloading anything.

Each image is compared with known copies of the scam using perceptual hashing and feature matching, so re-saved, resized or slightly cropped versions still match. If 3 of the 4 match, the message counts as the scam. On Strict, all 4 have to.

It never reads message text, it ignores bots and webhooks, and the images are checked in memory and then thrown away.

Setting it up

  1. Add it to your server and keep all the permissions it asks for.
  2. Move its role up. In Server Settings → Roles, drag Beast Hunter above your member roles. Discord only lets a bot time out people whose highest role is below its own, so this is the most common reason it "doesn't work".
  3. Let it see every channel, private ones too. A hacked moderator account can post the scam there as well.
  4. Run /bh status. It checks permissions, role position and channels, and tells you what to fix.
Add to Discord
Beast Hunter's reply to /bh status: Protect mode, Normal sensitivity, 60 minute timeout, logs and public message on, and the health check saying everything looks good
This is what /bh status looks like when everything's set up right.

Commands

Everything is under /bh. Only people with Manage Server can see the commands, and the replies are only visible to whoever ran them.

/bh status
Current settings, plus a check of permissions and role position.
/bh mode
Protect (delete and act), Report only (log it, touch nothing) or Off.
/bh sensitivity
Normal (3 of 4 images must match) or Strict (all 4).
/bh timeout
How long hacked accounts get timed out, 0 to 40,320 minutes.
/bh logs
Turn detection reports for your moderators on or off, and pick their channel.
/bh message
The public "caught one" message: channel, on or off, your own text, preview.
/bh dm
The DM to the account owner: on or off, your own text, preview.
/bh reset
Back to the default settings.
/bh help
The full command list inside Discord.

Found one it missed?

The scammers change their images every now and then. If a new version gets through, or the bot removes something it shouldn't have, post it in the support server, in #missed-scams or #false-positives. New versions get added to the reference set, which helps every server using the bot.

Join the support server

Beast Hunter is free, and every feature works the same for everyone. I run it on my own, so if it saved your server some trouble, a tip on Ko-fi helps with hosting. Supporters get a gold role in the community server.

Tip on Ko-fi