How I Detect Discord Selfbots Without Reading a Single Message

The article describes a method for detecting Discord selfbots (automated user accounts) by analyzing typing metadata rather than message content. It identifies bots by measuring the time between typing events across channels (humans take 300-500ms to switch, while bots trigger in 5-50ms), detecting messages sent without a preceding typing event, and spotting patterns where typing events occur in perfect channel ID order. The author offers a free tool at wiretrip.lol that implements these detection techniques with a 30-second setup and log-only mode.

Discord selfbots - automated user accounts - are used for spam raids, phishing, and coordinated attacks. Traditional moderation bots scan message content, but that requires the MESSAGE CONTENT privileged intent and raises privacy concerns. I wanted to catch bots without reading what people type. Discord's gateway broadcasts a TYPING START event every time someone begins typing. This is metadata - it tells you WHO started typing, WHERE, and WHEN. A human needs 300-500ms just to switch focus between two Discord channels. A selfbot fires parallel HTTP requests and can trigger typing in multiple channels within 5-50ms. That gap is massive. A hard threshold of 150ms catches every bot without touching a single real user. Selfbot Human ┌─────┐ ┌─────────────────┐ │5-50ms│ │ 300-500ms+ │ └─────┘ └─────────────────┘ ▲ ▲ │ │ CAUGHT SAFE Some selfbots disable typing events entirely using "silent typing" plugins . So I added the inverse detection: If a message arrives WITHOUT a preceding TYPING START - that's suspicious. Normal Discord desktop clients always fire a typing event before sending. No typing + message = likely automation. Selfbots often iterate channels programmatically - by ID order ascending or descending . Humans jump between channels randomly based on interest. If I see typing events hitting channels in perfect numeric ID order - that's a bot fingerprint. https://wiretrip.lol - free, safe defaults log-only mode , 30-second setup.