bot-tutorial

How to Use Discord Auto-Mod Bot to Block Spam, Links & Bad Words

Learn how to set up and fine-tune Discord's built-in AutoMod bot to automatically detect and block spam, malicious links, and toxic language—no coding required! ✅

July 27, 2026 · 396 views

Discord’s AutoMod bot is one of the most powerful—and underutilized—tools for server safety and moderation. Released in 2022 and continuously enhanced through 2026, AutoMod gives server admins and moderators a native, no-code way to proactively filter spam, phishing links, profanity, and harassment before it reaches your members. Unlike third-party bots requiring invites, permissions, and maintenance, AutoMod is baked directly into Discord’s infrastructure—fast, reliable, and fully integrated with role-based exemptions, audit logs, and real-time action previews. In this comprehensive guide, we’ll walk you through everything you need to know to configure AutoMod effectively: from enabling it and creating custom rules to testing triggers and refining false positives. Whether you're managing a 50-person study group or a 10K+ gaming community, mastering AutoMod is essential for sustainable moderation 🛡️✨.

Why AutoMod Beats Manual Moderation (and Most Third-Party Bots)

Before diving into setup, let’s clarify why AutoMod deserves priority over reactive moderation or even popular external bots like Dyno or MEE6:

  • Zero latency filtering: Rules execute server-side before messages are sent—no network round-trip delay.
  • Role-aware exemptions: You can whitelist trusted roles (e.g., @Mods, @Staff) so their messages bypass filters—even if they contain flagged terms.
  • Transparent action logging: Every blocked, alerted, or timed-out message appears in your Server Audit Log with full context—including who triggered it and which rule fired.
  • No permission bloat: AutoMod requires zero Administrator or Manage Messages permissions—it works silently and securely by design.
  • Compliance-ready: All actions respect Discord’s Community Guidelines and support GDPR/CCPA-compliant data handling.

And best of all? It’s free, enabled by default for all servers on Discord’s current tier (including Free, Nitro Basic, and Nitro Classic)—no subscription, no invite link, no bot token management.

Step-by-Step: Enabling & Configuring AutoMod

AutoMod isn’t “on” by default—but activating it takes just seconds. Here’s how to get started:

1. Access Server Settings

Go to your server → ⚙️ Server SettingsAutomod (left sidebar). If you don’t see this tab, confirm you’re a server Owner or have the Manage Server permission.

2. Toggle AutoMod On

At the top, flip the master switch: Enable AutoMod. You’ll instantly see three preconfigured rule categories appear:

  • 🔗 Block harmful links
  • 💬 Block spam
  • 🚫 Block abusive words

Each comes with sensible defaults—e.g., blocking known phishing domains (like bit.ly/abc123), repeated identical messages within 5 seconds, and a curated list of ~1,200+ slurs and hate terms (updated weekly via Discord’s Trust & Safety team).

💡 Pro Tip: Don’t disable these presets unless you have a documented reason. They’re battle-tested across millions of servers—and Discord updates them silently behind the scenes.

3. Customize Your First Rule (Example: Block Spam)

Click Edit next to Block spam. You’ll see:

{
  "trigger_type": "Message content",
  "trigger_metadata": {
    "regex_patterns": [],
    "keyword_filter": [],
    "preset_keywords": ["spam", "scam", "free nitro"]
  },
  "actions": [
    { "type": "Timeout", "duration_seconds": 300 }
  ],
  "exempt_roles": ["@Trusted Mods"],
  "enabled": true
}

But you don’t need JSON—you’ll use the visual editor. Adjust these key settings:

  1. Trigger Conditions

    • Number of messages: Default = 5 in 10 seconds → lower to 3/5s for high-risk channels (e.g., #advertising).
    • Same content: Enable “Identical content” to catch copy-paste spam.
    • Similar content: Toggle on to catch minor variants (e.g., fr33 n1tr0free nitro).
  2. Response Actions Choose one or more:

    • 🚫 Block message (most common)
    • Timeout user (5 min default; max 28 days)
    • 📢 Send alert to channel (e.g., #mod-alerts — requires Send Messages permission)
  3. Exemptions Select roles exempt from this rule (e.g., @Moderator, @Admin). You can also exempt specific channels (e.g., #spam-testing for safe experimentation).

[Image: AutoMod spam rule configuration UI showing trigger thresholds and action dropdowns]

4. Add a Custom Keyword Rule (Bad Words)

Click + Create Rule → select Block abusive words → choose Custom keywords.

Enter terms one per line—no regex needed (though regex is supported for advanced users):

shut up
you suck
kill yourself
nazi

⚠️ Warning: Avoid overly broad terms like bad or no—they cause false positives. Instead, use context-aware phrases: go kill yourself, die scum, etc.

You can also upload a .txt file (max 10KB) with up to 1,000 keywords. For large communities, DiscordCraft maintains a curated, regularly updated bad-word list vetted against false-positive benchmarks—worth checking before building from scratch.

5. Configure Link Filtering (Phishing & Malware Protection)

Under Block harmful links, click Edit. Key options:

  • Enable link scanning (default ON): Checks URLs against Discord’s real-time threat database (including newly registered suspicious domains).
  • 🌐 Allowlist domains: Add trusted sites (yourgame.dev, docs.google.com) to prevent false blocks.
  • 🚫 Block shorteners: Enable to catch tinyurl.com, cutt.ly, etc.—a common spam vector.

💡 Pro tip: Combine this with channel-specific rules. Example: In #announcements, allow discord.gg/* but block all other invites. In #support, block all links except help.yourapp.com.

Testing & Refining Your Rules

Never deploy AutoMod blindly. Always test first:

  1. Create a dedicated #automod-test channel (set to @everyone view-only, with Send Messages only for @Testers).
  2. Have a trusted member send test messages:
    • FREE NITRO!!! https://bit.ly/xyz123
    • hello hello hello hello hello
    • you’re so annoying lol
  3. Watch the Audit Log (⚙️ → Audit Log → filter by AutoMod) to verify actions.
  4. Check #mod-alerts (if configured) for real-time visibility.
  5. Adjust thresholds gradually: Start strict, then loosen if false positives exceed 2% of total triggers.

Use Discord’s built-in AutoMod Simulation Tool (⚙️ → Automod → Simulate Rule button) to preview how a message would be handled before sending it live.

Advanced Tactics: Layered Defense & Role-Based Logic

Top-performing servers combine AutoMod with smart structural design:

🧩 Channel-Specific Rules

AutoMod lets you apply rules only to selected channels. Ideal use cases:

| Channel | Recommended Rule | Why | |---------|------------------|-----| | #advertising | Block all links except approved partners | Prevents unauthorized promo | | #general | Block spam + abusive words | Core community hygiene | | #off-topic | Allow spam-like behavior (disable rule) | Encourages relaxed vibe | | #support | Block all external links except docs domain | Reduces phishing risk |

🎯 Role-Based Exemptions Done Right

Instead of blanket exemptions, use layered trust:

  • @Helper: Exempt from spam detection only (they may post guides with repeated phrases).
  • @Moderator: Exempt from all AutoMod rules—but log every bypass in #mod-audit.
  • @Bot: Exempt from abusive words (to avoid blocking status messages like ERROR: rate limit exceeded).

This preserves safety while empowering trusted members.

🔄 Sync with Human Moderation

AutoMod isn’t meant to replace moderators—it augments them. Best practice:

  • Set Timeout actions to 5–30 minutes, not permanent bans. Gives time for review.
  • Use Alert channel messages with /modlink (Discord’s native mod command) to jump straight to context.
  • Pair with #mod-notes: Encourage mods to add notes like “False positive — user was sharing legit tutorial link”.

Quick Tips for Ongoing Success

  • 📅 Review monthly: Audit logs > filter by AutoMod > check top 10 triggers. Remove outdated keywords or adjust thresholds.
  • 📊 Track metrics: Use Discord’s free Server InsightsSafety tab to see AutoMod action volume, drop-off rates, and exemption usage.
  • 🌐 Localize keywords: If your server is multilingual, add variations: mierda, merde, Scheiße alongside shit.
  • 🚨 Escalate wisely: Never auto-ban for first offense. Use timeout → warning → ban flow.
  • 🤖 Combine, don’t replace: AutoMod + slowmode + verified roles + reporting buttons = defense-in-depth.

FAQ: AutoMod Common Questions

Q: Does AutoMod work in DMs or group chats?
A: No—AutoMod only applies to server text channels. DMs are private and governed by Discord’s global safety systems.

Q: Can I export or backup my AutoMod rules?
A: Not natively—but you can copy/paste rule configs using browser DevTools (Console → copy(JSON.stringify(AutoMod.rules))). DiscordCraft offers a free AutoMod Backup CLI for automated exports.

Q: Why did a message with ‘egg’ get blocked?
A: Likely caught by preset keyword lists where egg is a known scam bait term (e.g., “free egg giveaway”). Use the Simulation Tool to diagnose—and add egg to allowlist if legitimate in your context.

Q: Do AutoMod actions count toward Discord’s 5,000-action/month limit?
A: No—AutoMod actions are unlimited and do not impact your server’s API quota.

Final Thoughts: Safety Is a Feature, Not an Afterthought

Setting up AutoMod isn’t just about stopping trolls—it’s about cultivating psychological safety, reducing moderator burnout, and signaling to members that your space is intentionally designed for respect and clarity. With thoughtful configuration, regular tuning, and human oversight, AutoMod transforms from a checkbox feature into your server’s silent guardian 🛡️💬.

Start small: enable spam blocking today, test for 48 hours, then layer in links and keywords. Within a week, you’ll spend less time deleting messages—and more time building community.

Need inspiration? Explore DiscordCraft’s AutoMod Playbook, featuring 12 proven rule sets for education, gaming, crypto, and creative servers—all tested in production during 2025–2026. And remember: the best moderation system is the one you actually maintain. So automate the noise—and keep the humanity. 🌟