ScamSentry — A Discord Bot for Scambaiting and Scam Investigation

What’s good master baiters (see what i did there) lol, I wanted to share a project that might be useful if you’re into scambaiting, reporting, or digging into scam infrastructure. It’s called ScamSentry, and it runs directly inside Discord.


:magnifying_glass_tilted_left: What ScamSentry Does

ScamSentry is built to make scam investigation easier without juggling dozens of browser tabs or tools. The bot ties together free data sources and utilities so you can check suspicious links, generate bait, or prepare abuse reports right in a Discord channel.

Core tools include:

  • Link & Domain Intel: /scanlink, /whois, /rdap, /dnsrecords, /iplookup, /reversehost, /headers, /subdomainhunt, /urlunshorten.

  • Baiting Utilities: /fakeprofile, /burnerinbox, /giftcardgen, /fakeinvoice, /delaytemplate, /timewaster.

  • Awareness & Education: /redflags, /educate, /scamoftheweek.

  • Reporting & Logging: /reportscam for domains, emails, IPs, and numbers, feeding into both server-specific and global blacklists.


:gear: How It Works

The bot leans on safe lookups (RDAP, DNS over HTTPS, VirusTotal free tier, etc.) and never pulls unsafe page bodies into Discord. Everything is sanitized to keep both users and servers safe.

If you want to bait, you’ll find fake profiles, disposable inbox generators, and fake card or invoice tools that generate convincing but non-real artifacts. These help you waste scammers’ time safely. For raising awareness, the bot can also post scam red flags or a rotating “scam of the week.”


:hammer_and_wrench: Setup

Once added to a server, you can run /configure to set things like:

  • Alerts channel for link hits and reports

  • Which roles can use intel and bait commands

  • Privacy mode (strict = ephemeral replies, normal = public)

  • Toggles like auto-delete, warn-only, and advanced checks

It’s designed to work out of the box, but config lets you adjust it to your community’s needs.


:puzzle_piece: Why This Matters

Most of us already use a mix of OSINT sites and scambaiting toolkits every day. ScamSentry pulls a lot of those workflows into Discord itself — the same place bait, reports, and collaboration usually happen. That cuts down on context-switching and makes it easier for new baiters to get started.


:link: Links


Would love to hear feedback, ideas for features, or pain points you’d like solved. If you’re running a Discord community dealing with scammers, or if you’re actively baiting, ScamSentry might save you time and add some fun to the fight.

Quick update on ScamSentry since the original post, a few new features added.

:new_button: What’s New

  • /scanimage - paste a screenshot of a scam message and it OCRs it, pulling out any URLs, emails, phone numbers, and domains automatically instead of you retyping them by hand. Feed the results straight into /reportscam, or run /scanlink on anything that comes out of it.
  • Related-contact detection on /reportscam - when you report a phone number or email, it now checks past reports for shared patterns, same area-code block on numbers, same disposable-email naming pattern, even when the exact contact info is different. Ties into the blacklist and cluster-detection side too, so a related contact can help link a new report back to an existing campaign.
  • Case reminders - if you open a case with /case-open and it sits untouched for a couple weeks, the bot will now DM you a quiet nudge instead of it silently going stale in the list.

None of this is a separate tool bolted on, it’s wired into the same reporting, case, and blacklist system that was already there, just closing gaps that existed since launch.

:link: Links

  • Add ScamSentry to your server: Invite Link
  • Same invite as before, no reinvite needed if you’re already using it.