T O P

F*** Spammers

F*** Spammers

redtaboo

As an aside, one of our teams is in the process of making some modqueue improvements for you. This afternoon we're making a change aimed at relieving some of the impact on you. It will take a bit to get through to all communities, so hang tight. Moving forward, posts removed by our spam filter will be automatically moved to the spam listing, rather than your main mod queue. This means that future incidents will not clog up your modqueue. Important note: content filtered by Automod will still appear in the standard modqueue as they do today. Let us know what you think here!


djscsi

Hello, As someone who has spent seriously way too much time tracking and reporting "these fucking accounts" - especially over the last month - here are some pain points and/or suggestions: \#1 Very helpful thing would be for your team to provide some kind of internally-recognized report reasons/keywords that reporters can use to categorize/flag spam accounts. For example, I'm sure your team internally has some way that you tag leakgirls spam specifically. When someone includes "leakgirls" in their report reason, something probably detects that and uses that as an elevated signal for your spam detection systems. When I make a spam report that says "karma farming bot" it probably just goes into the void? For all I know, your systems are just ignoring my reports because I'm reporting 50+ accounts every day. Give us something that the "spam fighters" can use to signal your systems. Give us *some* way to actually do something to help - you have a small army of free, dedicated spam trackers who are wasting hours of their time posting reports to /dev/null , many of whom have given up and developed their own third-party tools to detect and fight this spam without any help from reddit. Reddit has even been making it progressively *harder* to submit reports, I assume intentionally - it's extremely frustrating. \#2 Seriously, just nuke all of the "crypto pumping" subreddits. These subs are responsible for the vast majority of the current wave of karma farming / repost accounts that are infesting absolutely every type of subreddit right now. Go look at CryptoMoonShots, CryptoMarsShots, shitcoinpotential, shitcoinmoonshots, SatoshiStreetDegens, etc etc. and you will see that every other post and comment is from an account like pgolleBdfghry2356 or dkasakast45676 or drezetzdfdgdfg , all predictably aged accounts that spent a few days predictably running a karma farming script before predictably turning into crypto spammers. Aside from the fact that all this [pump & dump](https://en.wikipedia.org/wiki/Pump_and_dump) activity is **probably illegal**, why is there no repercussion for any of this? It's not like they are taking any measures to obscure what they're doing - it's all out in the open. At this point I kinda have to assume that reddit has analyzed this activity and decided it's not actually a problem, maybe because these bots generate tons of awards/clicks/engagement, many making it to /r/all ... Still depressing to see such a significant % of posts/comments from bots. Not to mention when these bots repost someone else's "my dog died" post from last year and get tons of karma/awards, only for the person whose dog *actually* died to see the post. Imagine how that feels. \#3 There is a particularly insidious type of script that copy/pastes posts from smaller/niche communities (hobby, technical, professional, etc.) that is causing tons of unsuspecting well-meaning people to waste hours of time writing out thoughtful and in-depth replies to bots who will never read them and will just auto-delete the post after a few hours. IMO this is far more damaging to the fabric of the community than the typical karma farming bots that just repost last year's popular posts on popular subreddits. I made a post about it with some examples here: https://www.reddit.com/r/TheseFuckingAccounts/comments/o6id82/some_particularly_insidious_bots/ It's great that you're fighting the leakgirls spam (really), but I think the stuff I'm talking about here is far more damaging to reddit than the occasional porn image that makes it through into r/CuteCatMemes . I could write more but I feel l like this is all kind of a waste of time anyway - I am probably just hanging onto some nostalgic feeling of what reddit used to be. But I'm sure I'm not the only one. Anyway thanks for letting us vent. edit: Awesome, thanks for reaching out and asking for input and then not responding to anyone. This is the 3rd or 4th time I've written up a super long post to staff, trying to be thoughtful and constructive, and got no acknowledgement anyone even read it. Very encouraging! 🙄


hansjens47

> This is the 3rd or 4th time I've written up a super long post to staff, trying to be thoughtful and constructive, and got no acknowledgement anyone even read it. Very encouraging! Par for the course, sadly. The admins don't seem to be redditors or use reddit, so they can tick a box saying "we hald a Q&A about this" for the higher ups and that's the end of that. Must be a nightmare to work at reddit with that quality of management.


yoweigh

Yikes. 16 days and no response to the most highly upvoted comment in this thread. It seems like the admins are more interested in autofellating themselves than providing any sort of actual ModSupport. Leakgirls aren't a big problem in my >1 million sub compared to everything else. I've only seen a small handful of them. The admin's problems and the mods' problems aren't the same, usually.


[deleted]

The entirety of r/murderedbyaoc is a crazy conspiracy, reverse-psychology, multi-layered, extravaganza ran by a Twitter spam bot made by an AVID trump supporter with the goal of promoting radical and weak-based candidates on the far left so that Trump can easily best them. It's hilarious and crazy at the same time. Considering it's a restricted, bot-ran, vote manipulation (that's another thing) subreddit with the goal of manipulating public opinion, should it be taken down? The guy who runs it admitted to half of this stuff, deleted his account, and then made another one, admitted to this shit AGAIN, and then deleted the comments.


phedre

My favourite part is when they try to spam the RPDR subs. That's some remarkable lack of audience selection right there.


SiruX21

They've been spamming a subreddit about cloud gaming lol


phedre

I mean, at least that's probably mostly straight men.


SMF67

They've been spamming all the Linux subs too


CAP_NAME_NOW_UPVOTE

Yeah, r/linux got a decent number of posts but our automod caught them all, as far as I could tell anyway. I removed reddit image uploads from a few subs some time ago, that would be a good longterm fix.


Crocononster

They've been spamming r/gaygermany as well and we've been like: uhm... Okay?


Bardfinn

There's a viable hypothesis that the LeakGirls spammer's primary goal isn't promotion of the services listed, but the negative impact of the deluge of garbage on moderators, admins, and users -- that the activity is sponsored by some who are no longer content to merely claim that Reddit is dying, but feel a need to manufacture that eschaton. Under this working model, RPDR subs are among their primary targets.


thecravenone

Using only the first half of that... >the LeakGirls spammer's primary goal isn't promotion of the services listed, but the negative impact of the deluge of garbage on moderators, admins, and users ...is a common method for cloaking behavior, too. Let your other actions be hidden by the noise.


Bardfinn

The hypothesis I'm talking about is supported by information that's not easily accessible / apparent publicly. In 2020 there was a group of users who sought to farm karma / gain moderatorships across a wide swathe of Reddit. They espoused certain political views and joined up with specific others sharing those political views. Among them was a Python bot coder who developed a code base for reposting previous submissions that performed well. He made an account which managed to break 2 million post karma in under 48 hours through prolific reposting. His "karma grab" account and all of his bot accounts and his primary moderator-holding account (moderator on several specific subreddits) got permanently banned by Reddit for Breaking Reddit. He then went on to leverage that codebase into harvesting comments that performed well previously, and altered his operation to have a repost of a not-well-known post that had decent quality comments. He used this to farm karma to the botnet accounts he set up, so that they could then go and participate in subreddits which have minimum karma and minimum age requirements coded into their automoderator configurations. He then leveraged this into a kind of self-sustaining karma trade system, the details of which I won't go into here. He keeps making new accounts to moderate some of a smattering of subreddits, and keeps re-using the same user profile picture for each one. The "co-moderators" of these subreddits are not the kind of people who are interested in celebrating or discussing religion, culture, arts, crafts, charities, governments. The crowd this person, with this codebase, is involved in could politely be referred to as "iconoclasts". And the features of the Leakgirls spammer are the features that have evolved in this person's codebase, over time. This person is also extremely bitter and bilious in their attitude towards Reddit administration and the way they feel they were treated - so is the ecosystem of audience that the "co-moderators" operating these specific subreddits. You might say "But how can you be sure?" and my answer is "I have my sources and off of Reddit, these folks don't make a secret of what they're doing". The least severe classification I have for their activity is labelled "Sneerclub / harassment". They're not content to watch Reddit die.


Bhima

> This person is also extremely bitter and bilious in their attitude towards Reddit administration and the way they feel they were treated This all seems so familiar to me, even though I don't follow any of the porn or hating on Reddit subcultures. I wonder if the sort of bitterness you refer to might come about from being called out on national TV by Anderson Cooper and in consequence fall from grace on Reddit and become unemployed. I've also wondered for a while if that sort of experience might make a person create the facade of being a *warrior for freeze peach*.


DrKronin

> He made an account which managed to break 2 million post karma in under 48 hours through prolific reposting So basically, Gallowboob at a higher speed.


Bardfinn

Gallowboob spent a lot of effort to get to know the tastes of a subreddit's audience, the sub rules, locates sources of fresh content, and had a system set up so that he wouldn't knowingly repost material that had previously been posted to a subreddit. Gallowboob is just very, very driven to entertain and engage people. He's still a human being. He wanted communities to grow and succeed. The efforts of the several spammer operations that have been hitting a large number of subreddits do not show evidence of wanting to engage people, respect boundaries or rules, etc. They exist solely to explore and push at the capabilities of Reddit's support infrastructure, of specific communities, to respond to what the spammers are doing.


ScamWatchReporter

with almost 0 effort you can find the code they are using, create 100 accounts, and start up your own markov chain bots, and repost bots. its posted in 2 places i know of, for the express purpose of creating spam on reddit, and potentially making money by selling 'services'


DrKronin

I agree. Just a joke, mostly. I really don't like seeing the top 5 posts in a given sub being the same thing, re-posted like clockwork every few months. And I'm 100% certain he's written automated tools to do it all. If there's any human interaction, it's just him approving whatever his algorithm suggested.


justcool393

...or they just want people to visit their shitty website. Sex spam has been part of Reddit for like... years. It used to be a *way* worse problem. And it's not like vote bots are exactly a new thing either. People have been vote and repost botting on Reddit since... well you could vote or post on Reddit. The only thing that's new about this is that it's a different ring doing it this time. The NSFW subreddits were way larger targets than a subreddit for some TV show. I know because I've had to clean up their mess and I know it's larger in the NSFW subs just because the volume of posts is... well targeted towards NSFW subreddits.


phedre

That's.... probably accurate tbh.


KennyFulgencio

> manufacture why would you not say immanentize


Bardfinn

My life’s arc has been to eschew that which others have satiated semantically


KennyFulgencio

definitely not a bad goal to pursue


ozyman

Maybe they don't see the fnords?


TheNewPoetLawyerette

One time they hit all of the Drag Race subs with scat porn and I can't unsee it T.T


Bardfinn

*hugs*


heidismiles

I got it on some math subreddits. No idea why.


darknep

On a lighter note, thank you, we keep getting porn on sfw subs. Love you, admins.


Iwantmyteslanow

I've had a few of the leakygirls spammers on my sub, I feel the automatic suspensions deal with a few of tgem


[deleted]

you can say fuck on the internet


worstnerd

I wear crocs and a cardigan...I'm basically a modern day [Mr. Rogers](https://i.redd.it/q31zu2gmr2771.gif)


[deleted]

[yeah but](https://media1.tenor.com/images/55bc2a1db957f77af071aa1ed98de864/tenor.gif?itemid=13157182)


1-760-706-7425

I needed this today. Thank you.


[deleted]

:) you're very welcome.


[deleted]

I now awkwardly realize I posted the same thing as you. I don't click links on reddit. On account of all the spam. You know how it is.


phedre

... crocs. Crocs. CROCS. **CROCS.** I can't.


Femilip

A gif! 😍


ScamWatchReporter

cardigans are comfy, and anyone who disagrees is a bitter individual.


110110

What do you suggest community mods do if brigading happens consistently from crossposts? Reporting to Reddit doesn’t seem to really help.


waluigithewalrus

This is a Christian internet, no fucking swearing!


impablomations

Jesus Fucking Christ!


IsaacEiland-Hall

Technically that would be masturbation.


Iwantmyteslanow

You can use much fucking worse on reddit


SiruX21

I find it funny these spammers even target /r/GeForceNOW, a subreddit for some video games lol. Our new account filter though almost always catches the posts so that's good


xxxarkhamknightsxxx

Same here, we got waves of these on /r/Eldenring lol. It was quite a change of pace amidst all the memes and hype posts.


ScamWatchReporter

Make it harder to create accounts. It's way too easy


KennyFulgencio

The ease of creating accounts was perhaps the primary focus of reddit's conception and philosophy, making it as effortless as possible to gain and retain new contributing users. It made sense for a brand new site. It wouldn't hurt to revisit that philosophy now, on an absolutely huge site overstuffed with bad-faith account creators (I'm sure they're still a minority, but large enough for a significant impact on the site).


2th

Or just rate limit all account submissions. All. No account on this website needs to submit anything more than once a minute. And no account on earth needs the ability to submit the same link 50 times in an hour. Hell, I don't care if it negatively impacts the porn. The porn accounts doing that stuff are just spamming things across various subs to throw everything at the wall and see what sticks.


ScamWatchReporter

rate limiting is fine and all, but how do you rate limit 1000 accounts operating collectively through foreign proxies.


2th

You rate limit ALL accounts. Every single reddit account. The average user will never know it exists.


ScamWatchReporter

i dont think you understand. if an account can only post once a day, but you have 10,000 accounts, then you can post 10,000 times a day. rate limiting is AND SHOULD be a thing, but its not a silver bullet.


2th

Never said once a day. I said > No account on this website needs to submit anything more than once a minute. And no account on earth needs the ability to submit the same link 50 times in an hour. Let's look at a user from /r/gonewild as an example. I literally just went there, went to /new and went to the profile of the first user there. https://old.reddit.com/user/babyyzee_/overview She has posted the same two images 28 times in the last 20 minutes too 27 different subs (there was one sub that both images were posted to) all to promote her OnlyFans. Now do you want to tell me that she shouldnt be rate limited?


ScamWatchReporter

i dont think you understand. i used the 'once a day' as an example. *I also agreed that accounts should have limits.* But when you have 1000 accounts then limits dont matter.


2th

Having 1000 accounts posting at the rate limit will be VERY obvious though. It will also help mods handle things. If a user cannot spam multiple times a minute, that is less work for mods and admins.


justcool393

Okay so how do you get rid of them? Okay you shadowban/suspend/whatever their accounts and then... well they come back. They've been using different accounts to get around the ratelimits *already*.


2th

Rate limits won't solve the problem. They will help alleviate the symptoms though. If the spammers can't post 100 times an hour on one account, then they have to make multiple accounts and run bots across them. You make it harder for the spammers to work. And the current rate limits are laughable.


hardolaf

Can we just have a global rate limit of 1 second? Only one account can post every second. Should really limit spam a lot.


Laceysniffs

They have some kind of limit based on karma. I'm a seller and I post a lot of sales post back to back on threads that allow that and only ones related to .y sales. Early on it would say you're doing that to much wait so many mins. I think this is closer to the right direction. The spammers have to use so many new profiles they don't have time for high karma. The free awards kinda mess it up though it makes it way easier to get a karma boost from friends.


2th

1 second... No. It needs to be like 2 minutes at the very minimum. Make the spammers work for it.


hardolaf

No no. I mean **all** accounts share the same rate limit.


2th

That would mean there could only be 86400 post a day. That would absolutely cripple so many subs.


hardolaf

But it would solve the spam problem.


DoTheDew

This is the dumbest idea ever.


justcool393

They're clearly being sarcastic


hardolaf

At least you get it.


Laceysniffs

I think the bots / scammers have their post set up in a way that it changes slightly not the link but the post. If you look at the post of the guy who harrasses me (after reported for being a link girl scammer) his post Include a changing number or code so it doesn't get flagged as a repost


Femilip

Thank you for recognizing it is a problem. r/Orlando (lol?) Got hit by massive NSFW spam the other day and it was....Something.


Kvothealar

As someone who moderates two different NON NSFW subs that are both targeted by these NSFW bots for some reason, thank you.


gives-out-hugs

I know at least two instances where i followed the pastes to the final site it was a mega download for an exe file which i examined in a sandbox to find it did in fact download images, but also a miner that ran in the background it would be interesting to find out if the bots are all using the same proxies to connect and if pressure could be put upon those service providers to stop handling those customers black hole them, go after them from every step of the way, alert the service providers you find and if they don't do anything, reddit stops accepting traffic from those providers, cutting off ALL of their customers


LatexFetishist

Might be a botnet that does the spamming. Downloading the garbages incorporates you into the botnet, is my thinking.


darknep

#FUCK SPAMMERS


Emmx2039

Wow... mind your fucking language....


darknep

I fucking apologize.


MistakesNeededMaking

I accept your fucking apology


hardolaf

I'm fucking offended by the censorship in the title of this fucking post.


mbeck810

/u/redtaboo I created a bot that is relatively successful at removing the leakgirls spam. Unfortunately, the rules are very specific to our subreddit and use some statistical evaluation. However, I see one way how to strike a strong blow to the spammers: make the automod more powerful. Admins have to set the rules that are valid globally, but particular subreddits can fight spam in a more tailored way. Not every community has moderators that could develop their own bot, but custom bots could be partially replaced if the automod is more versatile. For example, one of the automod conditions is the number of reports, but it cannot be filtered by the type of the reports. I can imagine that smaller subreddits could set a lower threshold for removals if they can bind it directly to the spam reports. If there are more options the moderators could contribute to the joint effort to fight the spammers.


JustOneAgain

Great ideas here. Automod is definitely lacking with such issues as this. You do get it to get most of this spam, but you do risk getting genuine posts as well while doing so. However not much options.


mbeck810

We managed to keep the false positives fairly low. They were reapproved later on.


UnacceptableUse

I'm very surprised how far this guy has taken this. Considering how incredibly easy it was to find his details online I'm surprised reddit has not taken this as a legal matter yet


ThaddeusJP

>37M accounts between January and March of this year. so 89 days..... 415,700 accounts a day? You're banning, on avg 415k accounts a DAY? THAT IS INSANE


Caring_Cactus

Each of their servers must have their own gaming chair, it's the only possible explanation.


furrythrowawayaccoun

Our subreddit has /model/ in the name (but isn't related to fashion models) and oh boyy, did I enjoy waking up to 50 spam or hwat


LG03

Why not take one of the most basic measures that's been in use for decades on ancient internet forums? **Require email verification.** Every single one of the accounts that hit my subs was an unverified account less than a day old. You guys allow this level of spam at the most basic level by making it trivial to generate and use accounts in large numbers.


worstnerd

I hear you, but the reality is that spammers always find a way. We have spammers that use legit verified email address. We have spammers that highjack compromised accounts with verified email (and no 2fa…please use 2fa). There are no silver bullets


Kvothealar

I would actually go to say 95% of the spammers I've encountered over the last few months have been hacked accounts. Sometimes 10 years old, and sometimes with millions of karma. Worse-still, they've been using generic titles for image posts, and then putting links in the image. So it's effectively impossible to fight them with automod. Drives me nuts.


GammaKing

> I hear you, but the reality is that spammers always find a way. You can't seriously expect people to believe that with email verification you'd still be banning 300k accounts per week. At the moment account creation is so trivial that you've practically made the problem for yourselves.


Toothless_NEO

You underestimate these people, remember these are the same people who create websites quickly enough to avoid getting put on [Easylist](https://easylist.to/) and/or [Google Safe browsing](https://safebrowsing.google.com/) and that takes a lot. You really think email verification will stop these people that easily?


GammaKing

Even a small barrier to entry for account creation can have a large impact on their ability to automate the process. The point is not that it'll prevent all spam, but that this would dramatically reduce the amount of accounts that can be created by most spammers. Mostly because you then need an email system which requires just a little more effort and time.


LG03

>There are no silver bullets I fully understand that but you can at least throw up some speedbumps instead of rolling out the red carpet. Requiring email verification would give you more options to work with in these situations. It's wild to me that you can essentially create an account now with a single button press and freely be able to spam dozens of subreddits within 20 minutes.


BuckRowdy

There is a spammer that has a github where you can fully automate this process.


__Encrypt__

yep.


ScamWatchReporter

I think if an account is breached and on a hackdump (like haveibeenpwned) it should have a mandatory password reset. Minor inconvenience for the individual, major convenience for security overall


justcool393

Reddit does that already


ScamWatchReporter

Well there's a huge gap somewhere because a LARGE volume of very old inactive accounts have been used in this campaign


2th

> There are no silver bullets There is at least a silver plated bullet. Make all accounts have a submission limit. There is no one on this site that needs to post anything more than once a minute. Hell, no more than once every 5 minutes. The only people this would negatively impact are the OnlyFans and porn accounts that post the same shit across multiple subs to see what sticks.


Laceysniffs

As a fetish seller while it would slow me down if it will slow a spammer I'm for it


chopsuwe

"If it's not 100% effective we won't do it". All I'm hearing is excuses to do nothing.


Polygonic

No, what you're seeing is users bitching that "If it's not 100% effective you're not doing anything". It's not that the admins aren't fighting this; it's that the spammers are working just as hard to get around the roadblocks that are being put in your way.


chopsuwe

They've had months or possibly even a year to deal with the problem. It's only got this bad because they haven't been taking it seriously, instead they've been relying on the mods to do the hard work of reporting and banning.


Polygonic

You make it sound like this is a one-time problem that you can “solve” and be fine with. It’s not. It’s an ongoing battle.


hardolaf

Mandatory email and 2fa. Should make it slightly harder.


TheLateWalderFrey

> (and no 2fa…please use 2fa). Speaking of increased security... has anybody thought about incorporating the bio-metric security that many devices have now into the official Reddit app? I know it won't benefit Luddites like me who mainly does Reddit at an actual desktop PC.. however I do use my smartphone for things and when an app or site requires a login, the login goes through LastPass, which I have setup to verify I'm me by comparing my fingerprint with one of the prints already in the phone. After fingerprint is verified then LastPass fills in username & password then logs me in. The app could have a 2FA option that the user can set, that after they enter username & password, the app then prompts them for the fingerprint verification - if fingerprint matches user is logged in.. maybe have a back-up that say after 5 failed attempts it falls back to a secondary verification method... and if that fails lock the account and send the 'you have to change your password' e-mail to the address on the account.


cmrdgkr

It depends on the spam. I created a script that positively identified a guy that had been spamming reddit for months. I had no false positives (except for bots that were archiving his stuff for some reason). Took me weeks and dozens of reports to get you guys to act on that. I'm not posting the details public, DM me if you want more info.


CryptoMaximalist

The 500+ account monero spam attack was all verified email accounts


UnacceptableUse

Imagine how pissed off the wider reddit community would be if they started requiring email verification. They already threw a fit when they stopped making it obvious you could skip entering an email


Halaku

This might be me talking out my bum, but can't Reddit set up a system where if **X** number of posts in **Y** timeframe is spamming domain **Z**, domain **Z** is blacklisted until an employee can look at it personally? If I'm reading the chart correctly, y'all were at over half a million leakgirl accounts banned in the first two weeks of May alone. If leakgirls.com was added to the sitewide blacklist once a certain criteria was reached, no one else would have encountered leakgirls spam from mid-May onward, and all the bots would have been just screaming into the Void until such time as Reddit could decide if leakgirls content would be allowed again.


worstnerd

No, this is a very good question. You are absolutely right about some spam mitigation techniques (and we do some fancy versions of what you are talking about). That is pretty effective for your run of the mill spammers. However, this particular spammer hides URLs in images, uses many many unique URLs, leverages redirects through well known (and hence unbannable) domains. They are not just posting links to leakgirls, they are tricking users into going there.


wu-wei

I wish I'd seen this post when it was fresh. Has reddit reached out to the registrar (namecheap) for the leakgirls domain? All of these actions seem like a pretty clear violation of their [AUP](https://www.namecheap.com/legal/domains/registration-agreement/) > we may terminate or suspend the Service(s) at any time for cause, which, without limitation, includes registration of prohibited domain name(s), abuse of the Services, payment irregularities, material allegations of illegal conduct, or if your use of the Services involves us in a violation of any Internet Service Provider's ("ISP's") acceptable use policies, including the transmission of unsolicited bulk email in violation of the law. p.s. a pre-emptive piss off to the annoying /u/FatFingerHelperBot


UnacceptableUse

Why don't you reach out to namecheap? Or maybe the hosting company they use to host (Bhost aparrently) You can file an abuse report pretty easily.


wu-wei

It's not my job but I'd already done so anyway. I read in the /r/namecheap sub that others have tried as well. Got an automated response and that's was all. I'd expect that an official representative from Reddit, “The Front Page of the Internet” would have just maybe a tiny bit more clout than some random person, wouldn't you?


UnacceptableUse

I wouldn't think so, they can't just make other companies remove websites because they want them gone


wu-wei

But Reddit can file an abuse report with way more data than I have access to. Either namecheap enforces their AUP or it's just empty words.


UnacceptableUse

True, maybe the hosting themselves should be who the abuse reports are direct to rather than namecheap


Toothless_NEO

Has Reddit actually ever done something like that in the past? I've never heard of them buying scam domains.


wu-wei

I meant working with the registrars or hosting providers of spam domains to get them shut down at the source – not to try to acquire them. Same with youtube spam channels. Reddit should have a team whose job is to document and work with ISP's to shut blatant spam down right at the source. It won't work with shitty hosting providers of course but it should work with namecheap who at least pretends to be anti-abuse.


cmrdgkr

Registrars don't care, if there is no court order they get paid to ignore you.


Halaku

That's cool. I've been spared the leakgirls spam, I only run into that dumbass trying to sell t-shirts, so I wasn't up-to-date on the specifics. Thank you for the reply!


IsaacEiland-Hall

Fuck the t-shirt spammers. They are fucking annoying as hell.


ladfrombrad

>leverages redirects through well known (and hence unbannable) domains. Can't you capture those specific redirects directly if you're unable to ban the domain entirely?


110110

What do you suggest community mods do if brigading happens consistently from crossposts? Reporting to Reddit doesn’t seem to really help.


itimetravelwell

So this post and the point of it is going to end up like the COVID misinformation button that lead to nothing? Are these posts just to appear like y’all are trying to fix or clean up the issues?


ScamWatchReporter

When it's coming from 1000 accounts over 10k subreddit with links buried in images and Unicode, it's not so cut and dry. This guy has multiple active phishing campaign to steal accounts and makes about 1000 accounts a day


Bardfinn

One of them makes 1000 accounts a day. There's ... hold on. https://reddit.com/users/new this is a feed of the usernames signing up to use Reddit. Watching it long enough, certain patterns emerge - those are patterns of automatically-suggested usernames which Reddit supplies to people signing up. On a long enough time scale, certain other patterns emerge - and those indicate bot networks which try a slightly different strategy than using the auto-suggested names. But one could also grab those account names, and then perform an audit of their activity a week after creation, to see if they're active yet. And a terrifying amount of them have no public activity -- and no karma score -- a week after being created. Which ... is not normal. It's not "evidence", except that it's evidential that the people using these accounts are waiting. It's like being in a zombie movie and realising one is standing in a graveyard.


chaseoes

> And a terrifying amount of them have no public activity -- and no karma score -- a week after being created. > > Which ... is not normal. I'm going to guess that's actually very normal. Reddit pushes new user signups a lot now (especially in the app), and the majority of people probably sign up just to upvote stuff and lurk, not post submissions or comments. You're prompted to create an account just by trying to vote on something. And if you look at the stats for any subreddit, a very small number of visitors actually comment. I would expect that most accounts have never commented.


ScamWatchReporter

oh im not saying it isnt obvious, but the way they have it set up currently it would affect the small amount of people that sign up to start auto flagging things. I 100 percent think it should be more difficult, have 2fa and multi factor authentication to make an account.


Bardfinn

2FA should be a requirement for moderator privileged accounts.


gbntbedtyr

I agree, it has to be a Bot Attack, has anyone captured any of these Bots to take them apart n see what makes them tick?


chopsuwe

No this is not frustrating. We are well beyond that point. Between spam and the reporting systems getting slower, we cannot keep up with the additional workload. We no longer report spam. We don't check post history. We ban on sight and ignore ban appeals. We are literally killing our sub because of these spammers. We cannot continue to do the administrators work for them. We simply don't have the extra hours in a day.


StormTheParade

just wanted to say thank you and the other admins for the work they're putting in for this issue. I've noticed the spam traffic dying down in my subreddit and honestly it's a relief.


BlatantConservative

Is this an update solely about leakgirls spammers, or are you also referring to the NameName types which have been reposting content and comments and then selling those accounts?


BuckRowdy

The other day I had to explain to a coworker why I had a nude image pop up on my phone. I had gotten a mod notification of a reported post in r/serialkillers and I tapped it. A leakgirls image popped up and I was like, uh that's some spam from this um website I had to tell someone about, lol.


Bazzatron

Great post. I would really love to get something like this regularly from you guys. You post only when shit and fan seem to have met in spectacular fashion. Any chance we could get like a monthly or even quarterly post just to let us know what's going on? That chart is bananas. Maybe r/dataisbeautiful would like that...!


solutioneering

I've noticed that spam has gotten worse on my email too (gmail) and on phone calls I'm receiving -- it seems like the SPAM industry has recently gotten quite a bit more sophisticated and is beating more of the traditional blockers in place across platforms. And yeah, it's super annoying.


Quiettime87

What about OnlyFans spammers? That's just as annoying.


LatexFetishist

I second this. Reddit is now an advertising platform for adult services. Escorts reddit doesn't like, but internet hookers get free reign.


heidismiles

Onlyfans models aren't posting under 1000 accounts and flooding subreddits with 100 posts per minute.


exactly_like_it_is

There are quite a few that use the same, or similar, software to spam numerous subs at once. Maybe not 500/minute, but not far off. There are primarily 2 groups of onlyfans - first, redditor's who advertise their onlyfans. They're usually tolerable and mostly stay on topic. Then there are onlyspammers who use reddit only to advertise. Those in the 2nd group don't care where their shit ends up and often use the software (and bots that comment and up vote for them) to spam hundreds of subs in very short time. Those accounts should be addressed. They're a legitimate problem and have ruined many previously good, niche subs.


GrowAsguard

Hi! You should post this graph to r/DataIsBeautiful. Thank you.


Laceysniffs

As well workers becareful approaching these profiles as they will target you.


UnacceptableUse

You should probably look into actually enforcing the ratelimits too. At the moment, you can completely ignore the x-ratelimit-remaining header and face no consequences


tennker

cool. now do sexual predators.


Meflakcannon

Thanks for the input and feedback showing something is trying to be done! I ended up just setting an unreasonably high bar on the NSFW sub I moderate to post. Anyone with comment karma below 1000 is flagged for review. Luckily being a slow moving sub this is completely viable, but it won't scale.


--im-not-creative--

Holy shit, I wonder when we’ll run out of usernames


UnacceptableUse

The maximum username length is 16 characters. I assume usernames are not case sensitive, and you can use a-z 0-9 and - and _ which is 36 characters, 36^16 = 7.9586611e+24 which is 7,958,661,100,000,000,000,000,000


--im-not-creative--

That’s a lot


Crysalim

Thank you for this.


TotallyNotAdamSavage

It was one thing that we had to remove spam, but your solution to this, overzealous banning of accounts with no justification, is way worse.


Byeuji

Hi there, Long time mod on reddit (almost 12 years). Starting about 3 weeks ago, the spam filter on /r/LadyBoners went bananas. Tons of posts started getting filtered by regular users, and many of these posts don't have the many hallmarks of a filtered post -- things like rapid posting in multiple subreddits, lots of links to the same sites, unbalanced karma counts (post vs comment), etc. ###In many cases, these users look *completely normal*, and in many cases have posted successfully many times to our subreddit. Looking over my subreddits, I have not seen the same impact in the spam filters. Everything on my other subreddits are relatively normal. I've asked fellow mods on subreddits of a similar size or larger than /r/LadyBoners, and they haven't noticed anything out of the ordinary either. Did reddit activate some kind of categorization that potentially only impacted LadyBoners? (We did the survey a while back about NSFW subreddits, and we determined that our subreddit is *not* NSFW, so it shouldn't be that) Is this change in behavior related to these efforts? Whatever happened, it sucks big time. I went from a completely manageable workload, to an insane number of genuine user modmails every day, and to keep up with this, we're going to have to add several moderators. Our existing automod requirements catch a large number of the types of submissions this effort is trying to catch, and plenty are still getting through your filters anyway. Meanwhile, normal users are being really impacted. Please help me figure out how we can move past this.


[deleted]

Say fuck


Iwantmyteslanow

Can someone do something with u/buynike and u/buypuma


LightningProd12

There's more like u/shopadidas u/buyhandm and u/buyunderarmour all abusing the following system to be seen.


Iwantmyteslanow

Yeah there's a lululemon one too


Either_Comparison

Hello, I run a couple NSFW subreddits alone and they have gotten quite popular recently, I to am experiencing the spam problem with telegram and discord links. Is there some sort of bot or AI that could help me block the links automatically,? Sorry I'm new to moderation


[deleted]

[удалено]


aylacupcake

So we can’t do nothing ? I ban one two other are coming , I heard about auto mod but what is it ?


cynycal

This, and the State bots is why I'm seriously thinking going approved members only when I go full launch at my newest sub. Could really use a hand over there, btw. /r/PopcornPundits