marble dome
Description:
Scammers are repeatedly creating accounts with names like "admin" to impersonate staff and spam links to 3rd-party scam sites. Even after the account is banned, they simply join a new server and use the same name again. This creates an ongoing security risk and confuses legitimate players who think these accounts are official.
To help prevent scammers and bots from impersonating staff or tricking players, I propose adding the following usernames (and their variations) to the restricted name list. These names are commonly used in phishing, fake moderation, or giveaway scams.
Proposed Ban List:
-
Staff / Authority Impersonation
admin, administrator, gameadmin, game-master, gamemaster, gm, mod, moderator, sysadmin, support, helper, owner, founder, dev, developer, staff, team, tester, qa, tech, techsupport -
Official Branding & Variations
official, server, serveradmin, system, systemadmin, service, services, master, masteradmin, overseer -
Payment & Account Scam Bait
payadmin, paymaster, donation, donate, giftcode, giftcard, voucher, redeem, freecoins, freegems, freemoney, claimprize, claimreward -
Misspellings & Common Variations
adm1n, admln, gamemaster_, gm_, mod_, supp0rt, help3r, own3r, dev_, 0fficial, offic1al -
Highly Suspicious Social Hooks
clickhere, login, password, passreset, verify, verification, secure, unlock, update, banappeal, appeal
Recommendation:
Block case-insensitive matches.
Detect and block leet/number substitutions (e.g., 0 for o, 1 for i).
Optionally implement a regex filter to catch extra characters (e.g., a_d_m_i_n, g@m3m@st3r).
These changes would make it much harder for malicious users to impersonate staff or trick community members, especially in cases like the repeated “admin” scammer described above.
zealous lava