Honeypot
The channel that catches spam bots for you
A honeypot is a channel your members are told never to post in. Spam bots and hijacked accounts post in every channel they can see, so the moment one touches it, Tickety knows exactly what it is looking at.
Free on every plan. Setup is one command.
Servers running a honeypot
Traps tripped
Accounts caught
How it works
Four steps, and only the first one needs you. Everything after it happens while you are asleep.
Create the bait channel
One command makes a channel and posts a notice in it saying the channel is a trap and nobody should write there. You can also point Tickety at a channel you already have.
Your members read it and move on
That notice is the whole instruction. Anyone who opens the channel sees one sentence, understands it, and never comes back.
A bot walks the channel list
Self bots and token stealers do not read. They post their link in every channel they are allowed to write in, which is the one thing nobody in your server will do.
Tickety acts and explains
The message goes, the account is timed out, kicked, softbanned or banned, and it receives a DM telling it what happened and how to get the account back. Every catch lands in your log channel.
Why a trap beats a filter
Spam filters chase wording. A honeypot watches for something a member never does, which is why it keeps working after the scam changes.
It does not need to know the scam
A word filter can only stop what it has already seen. A honeypot stops behaviour instead, so a brand new domain, a fresh wording and a campaign that launched this morning all trip it on the first message.
It tells you the account was stolen
Almost nobody who posts in a honeypot meant to. It is usually a real member whose session token was taken, which is why the DM Tickety sends is a recovery guide and not just a removal notice.
It costs your server nothing
There is no scanning pass and no per message work. Tickety compares one channel id against the channel a message arrived in, and for every other message in your server that is where it stops.
What happens to the account
You pick one. It applies to every catch, and the trigger message is deleted.
Log the catch and leave the account alone. Useful while you are still watching what actually lands in the channel.
Mute the account for as long as you choose, up to Discord's 28 day maximum.
Remove the account from the server. It can return through a normal invite.
Ban and immediately unban, which is how Discord is asked to delete the account's recent messages without keeping it banned. This is the default.
Ban the account and purge its recent messages. The log entry carries an Unban button for the first 24 hours.
Roles you mark as exempt are never actioned, and administrators are exempt by default. Turn on the rejoin link and a compromised member gets a permanent invite in the same DM, so they can clean their account up and come straight back. More on placing a honeypot channel and on recovering a hacked Discord account.
Frequently asked questions
What is a honeypot channel in Discord?
It is a channel that exists only to be posted in by something that should not be there. Members are told never to write in it, so any message that arrives is either a spam bot or an account that has been taken over. Tickety watches the channel and acts on whoever posted.
Will it catch a real member by accident?
It can, and that is usually the point: the real member whose account was stolen is the one posting. For the rare curious click, exempt roles and the administrator exemption keep your staff safe, and the softban default clears the message without leaving anyone banned.
Does the honeypot cost anything?
No. The trap, every action, the exemptions, the warning message, the DM, the counter button and the log channel are free on every plan. Premium adds more than one bait channel, Components V2 message layouts, blocklist escalation, quoting the message that tripped the trap in the log, and choosing what the counter button shows.
What is a softban?
A ban followed immediately by an unban. Discord deletes an account's recent messages when it is banned, so a softban clears the spam out of your server without leaving the account on the ban list.
Where should the bait channel go?
Somewhere a sweeping bot will reach and a member will not linger: visible to everyone, near the bottom of a public category, with posting left on. A channel nobody is allowed to write in catches nothing.
Someone I trust got caught. What should they do?
Their session token was almost certainly stolen. They should change their password, log out of every other session, and check their authorized apps. The DM Tickety sends links the full recovery guide, and the rejoin link brings them back once they are done.
Set the trap in one command
Add Tickety, run the setup, and the next account that sweeps your server posts itself straight into the log channel.
