DETECTION & SECURITY
Alt Detection & Ban Evasion
VIRCON's alt detection system automatically identifies potential alternate accounts and ban evasion attempts using pattern matching, timing analysis, and metadata comparison. The system flags suspicious accounts for staff review without auto-banning to prevent false positives.
Alt Commands
Commands for managing alt detection and flagged accounts.
- ,alt check <vrc_user_id> - Scan for potential alt accounts
- ,alt flags [user] - View all alt detection flags
- ,alt resolve <flag_id> <confirmed|false_positive> - Mark flag status
- ,alt link <vrc_user_id_1> <vrc_user_id_2> - Manually link known alts
- ,alt unlink <alt_link_id> - Remove incorrect alt link
- ,alt links <vrc_user_id> - Show all linked alt accounts
Detection Methods
Five detection methods used to identify potential alternates.
| Method | Description | Confidence |
|---|---|---|
| Account Age Proximity | Multiple new VRChat accounts joining within 48 hours | Medium |
| Rejoin Timing | User rejoins group <7 days after ban/kick | High |
| Metadata Similarity | Similar bio text, avatar IDs, or friend lists | Low-Medium |
| Discord Link Pattern | Multiple VRChat accounts linked to same Discord user | Very High |
| Ban Evasion Rejoin | New account joins after ban with similar activity pattern | High |
Flag Statuses
Possible states for alt detection flags.
Alt Detection Workflow
Steps in the automated alt detection process.
- 1. System performs daily automated scan of new member joins.
- 2. Detection engine compares account metadata, join timing, and behavior patterns.
- 3. Flagged accounts appear in ,alt flags list with confidence score.
- 4. Staff reviews flags using ,alt check to see detailed evidence.
- 5. Staff marks flag as confirmed (linking accounts) or false_positive.
- 6. Confirmed alts are auto-flagged in moderation logs for visibility.
- 7. Ban evasion triggers alert to admin channel with recommended action.
Alt Flag Database Schema
Database fields for tracking potential alt accounts.
| Field | Description |
|---|---|
| flag_id | Unique alt detection flag identifier. |
| vrc_user_id_primary | Primary suspected account. |
| vrc_user_id_secondary | Potential alt account. |
| detection_method | Which detection method triggered the flag. |
| confidence_score | 0-100 likelihood of being an alt. |
| evidence | JSON object with detection details. |
| status | pending, confirmed, false_positive, investigating. |
| flagged_at | Timestamp when flag was created. |
| resolved_by | Staff member who resolved the flag. |
| resolved_at | Timestamp of resolution. |
Alt Link Database Schema
Database fields for confirmed alt account links.
| Field | Description |
|---|---|
| link_id | Unique link identifier. |
| primary_vrc_id | Main account ID. |
| alt_vrc_id | Alternate account ID. |
| confidence | confirmed, suspected, manual. |
| linked_by | Staff member who created the link. |
| linked_at | Timestamp of link creation. |
| notes | Staff explanation for linkage. |
Automation Features
Automated systems that run without manual intervention.
- Daily automated scan runs at 03:00 UTC for new members.
- Auto-alerts sent to admin channel for high-confidence ban evasion (>85).
- Confirmed alts are cross-referenced in ban/kick logs automatically.
- Join date clustering algorithm detects coordinated account creation.
- Metadata fingerprinting compares bio, avatar, and profile similarities.
Real-World Use Cases
Examples of alt detection in action.
Scenario 1
User banned for harassment rejoins with new account next day
Detection: Rejoin timing + Discord link pattern
Action: Auto-flagged high confidence, staff notified immediately
Scenario 2
Multiple new accounts join group within 2 hours
Detection: Account age proximity + similar join time
Action: Flagged medium confidence for staff review
Scenario 3
User has 3 VRChat accounts linked to same Discord
Detection: Discord link pattern
Action: Very high confidence flag, likely legitimate alt usage
Best Practices
Guidelines for effective alt detection management.
- Review high-confidence flags (>80) within 24 hours to prevent ban evasion.
- Always investigate before banning - false positives can damage trust.
- Use ,alt link to manually connect confirmed alts for tracking.
- Track rejoin timing - users rejoining <7 days after ban are suspicious.
- Check Discord link history - multiple VRChat accounts per Discord is a red flag.
- Document evidence in notes when resolving flags for future reference.