Xattix — Discord Anti-Impersonation & Scam Detection Bot

Four Layers of Identity Protection

While other bots check who gets in, we check who they're pretending to be.

Security Dashboard

Granular control over security thresholds, alert routing, and detection sensitivity tuning.

Protection Settings

Strict Matching

Blocks partial visually similar names.

Automated Action

What to do when an impersonator is caught.

Protected Roles

Users with these roles are actively monitored.

@Admin @Moderator

7-Stage Unicode Normalisation

We strip Zalgo, Cyrillic lookalikes, and invisible characters before comparing names.

A̸͋d̸̾m̵͝ḯ̵n̵

↓

Аdmin (Cyrillic 'A')

↓

Admin (Clean)

Cross-Server Blacklist

Known scammers tracked and blocked across every server running Xattix.

OAuth2 Join Portal

Block alt-accounts before they join.

Authorize

Beyond Detection — Platform Security

Other bots catch the easy fakes. Xattix catches the ones that cost you members, money, and your community's reputation — before the damage is done.

Cross-Server Threat Intelligence

Known scammers are fingerprinted (name + avatar hash) and tracked across every server running Xattix. One kick protects them all.

Two-Factor Join Verification

Identity-Bound Join Portal: OAuth2 authentication + one-time access codes. Blocks bots, alts, and raiders before they ever get in.

Anti-Quarantine Architecture

Distributed API budget manager with priority-based rate limiting prevents Discord from ever flagging or quarantining the bot — even at 100K+ servers.

Alert Escalation System

If a flagged user changes their profile to increase impersonation similarity, existing alerts auto-escalate with updated scores and admin pings.

GDPR & CCPA Compliant

Full data sovereignty: /privacy export, /privacy delete, and OAuth2 Linked Roles consent. We never DM without explicit opt-in.

Roleless Member Cleanup

Automatically warns and removes members without roles after a configurable grace period — catches lurking alts and abandoned accounts.

7-Stage Unicode Detection

Catches Cyrillic, Greek, fullwidth, math symbols, leet-speak, superscripts, and zero-width characters. Tricks like Αdⅿⅰn don't slip through.

Legacy Member Protection

Roleless cleanup never kicks members who joined before activation. Your existing community stays safe during rollout — guaranteed.

Built for Trading Communities

Impersonation isn't generic in trading servers — the stakes are financial. Xattix is purpose-built for the threats your community actually faces.

Signal Caller Impersonation

Scammers clone your top signal callers — same name, same avatar, same bio — then DM members with fake trades. Xattix catches them before the first message lands.

Fake Admin Pump-and-Dumps

Attackers impersonate admins to post fake "alpha calls" and exit-scam your members. Multi-vector detection stops identity theft at the source.

Member Infiltration via Alts

Bad actors create alt accounts resembling trusted members to build credibility, then pivot to scams. The Identity-Bound Join Portal blocks alts before entry.

Stolen Mod Identities

Moderators are high-value targets. When someone copies your mod's identity across servers, the cross-server blacklist flags them everywhere — instantly.

Everything You Get with Xattix Shield

One plan. No feature gates. Every tool your server needs to stay safe.

One-Click Alert Actions

When an impersonator is caught, admins get a rich alert embed with Kick, Dismiss, and Whitelist buttons right inside Discord. No commands to memorize — just tap and respond.

Interactive Setup Wizard

A 6-step guided wizard walks you through selecting protected roles, sensitivity presets, auto-kick rules, and cleanup settings. Your server is fully configured in under 60 seconds.

Bio Impersonation Analysis

Scammers copy bios to look legitimate. Xattix background-fetches and compares bios using similarity scoring — a signal most bots completely ignore.

Customisable Welcome Messages

Greet new members via DM, channel, or both. Supports YouTube link auto-embeds, image attachments, and template variables like {member} and {server}.

Scheduled Reminders

Set recurring messages with role pings on a custom schedule — perfect for weekly announcements, event reminders, or security notices your team won't forget.

DM Consent System

The bot never DMs a member without explicit opt-in. A one-click consent button lets members choose, and their preference follows them if they rejoin.

Sensitivity Presets

Choose from Low, Medium, or High sensitivity profiles that tune all detection thresholds at once — or fine-tune each setting individually from the dashboard.

Unified Audit Log

A single searchable timeline combining alerts, kicks, joins, blacklist actions, and cleanup events. Exportable as CSV for compliance reporting.

Discord Linked Roles

Members can grant global DM consent via Discord's Connections tab — no per-server button needed. Uses the official Linked Roles API for seamless integration.

Full Web Dashboard

Manage protected roles, whitelist users, review alerts, configure settings, and export data — all from a browser. No Discord commands required.

Auto-Setup Protected Roles

Don't know which roles to protect? Xattix automatically detects admin and moderator roles in your server and suggests them during onboarding.

Blacklist on Kick

Every kicked impersonator is automatically added to both your server blacklist and the global cross-server database. If they try to rejoin any Xattix server, they're blocked instantly.

Frequently Asked Questions

Does Xattix replace Wick or MEE6?

No — it works alongside them. Wick excels at anti-nuke (protecting server structure) and auto-moderation. Beemo catches userbot raid waves. Xattix is purpose-built for identity-based threats: impersonation detection, cross-server scammer intelligence, and two-factor join verification. Where Wick's join gate uses simple filters (account age, no avatar), Xattix's Identity-Bound Join Portal requires OAuth2 + one-time access codes — a fundamentally stronger gate against alts and social engineering. Think of Xattix as "Layer 2" security that fills the gaps other bots leave open.

Will it cause false positives?

We use a multi-signal corroboration system. A name match alone isn't enough — the bot requires corroborating evidence (matching PFP, new account, similar bio) before alerting. You can also tune sensitivity per server.

Does it require external verification links?

Core protection happens inside Discord — no external links required. You can optionally enable the Identity-Bound Join Portal, which uses a secure OAuth2 web page for two-factor member verification. Privacy-first by design.

How do I configure which roles are protected?

The setup wizard lets you select roles interactively. You can also use /config roles at any time to add or remove protected roles.

Is there a cross-server blacklist?

Yes. Known scammers are tracked across all servers using Xattix. If someone is blacklisted in one server, they're flagged everywhere.

Your admins are being impersonated. We stop it.

Built by a Trader, for Traders