How to protect your Discord server from scam image spam: sanctioned on the very first image
June 2026 recap across the 375,000 Discord servers protected by RaidProtect (from June 1 to July 1, 2026): 4 million scam images deleted by ScamLens and 160,000 hacked Discord accounts identified. These scams impersonate celebrities like MrBeast, Elon Musk or Andrew Tate, who obviously have no connection to these messages. New this month: ScamLens now sanctions on the very first detected image, instead of cleaning the whole wave before sanctioning, to cut off a hacked account before it can post any more.
🛰️ Recap: ScamLens, RaidProtect's image anti-scam
For servers just discovering RaidProtect: ScamLens is the module that handles scam images. As soon as an image is posted, it checks it against its catalog and automatically deletes the fraudulent ones: crypto scams, fake celebrity giveaways (MrBeast, Elon Musk, Andrew Tate, Kick, Stake…), fake online casino promotions. Nothing to configure or maintain on your end: ScamLens runs by default as soon as you add RaidProtect.
📊 ScamLens recap since February 14, 2026
Cumulative data since the early activation of ScamLens on :
| Indicator (cumulative since February 14) | June 1, 2026 | July 1, 2026 | Change |
|---|---|---|---|
| Images analyzed (unique) | 1,800,000 | 3,000,000 | +67% |
| Scam images detected (unique) | 141,000 | 275,000 | +95% |
| Fraudulent images deleted | 2,300,000 | 4,000,000 | +74% |
| Hacked Discord accounts identified | 80,000 | 160,000 | +100% |
The number of hacked accounts identified has doubled again in a month (80,000 → 160,000), and the volume of deleted images now reaches 4 million. The unique image catalog is climbing fast (+95%): new visual clusters keep appearing in bulk. A visual cluster is one same scam image plus all its micro-variants (re-crops, filters, retouches); when the unique count climbs this much, new visuals are being launched, not just spin-offs of the old ones (see May's "3-image" combo).
🆕 Update: sanction on the very first image
Until now, when a hacked account dumped its wave, ScamLens deleted all the messages first, then sanctioned. During that cleanup, the account could keep going for a few seconds, and those waves sometimes included role mentions that flooded the server with notifications.
Now, on the first scam image detected, RaidProtect deletes and sanctions immediately (configurable sanction), then cleans up the rest. The hacked account is cut off on the spot, with no time to post more or ping the server.
❓ FAQ
What is ScamLens on Discord?
ScamLens is RaidProtect's image anti-scam module, the Discord protection bot. It analyzes every posted image in real time and automatically deletes the ones it identifies as fraudulent (crypto scams, fake celebrity giveaways, fake online casino promotions), with no configuration at all.
Does ScamLens delete the images or sanction the account first?
Since June 2026, ScamLens sanctions the account on the very first detected scam image (configurable sanction), then cleans up the rest of the wave. Before, it deleted all the messages first before sanctioning, which let a hacked account post a few more images.
Why is my Discord account sending scam messages on its own?
Your account has most likely been hacked. Scammers steal your authentication token (fake site, infected software, malicious extension) and use it to spam scam images on every server you are in, without you knowing.
What should I do if a member of my Discord server is broadcasting a crypto scam?
Don't ban them: it's almost always a hacked account, not a malicious user. Reach out privately so they can secure their account. ScamLens already removes the image on the fly, without punishing the legitimate owner.
How do I recognize a fake giveaway or fake crypto promotion on Discord?
Any crypto "giveaway", online casino with a celebrity logo (MrBeast, Elon Musk, Andrew Tate, Kick, Stake) or "guaranteed" investment is a scam. These personalities are not behind these messages: scammers simply impersonate their image and reputation. Discord never runs cryptocurrency distributions, and no serious brand spams across multiple servers.