Antiraid: How Security Stops a Raid on Your Telegram Group

Antiraid is the anti-raid protection of Doublegram Security. It watches what new members do in their first 30 minutes in the group. When many arrive and start posting together, it alerts the admins and, if you allow it, mutes them, bans them and closes the entrances. Antiraid is part of Doublegram Premium: see Security Premium for your group. With Premium it's on from the start, in 🔔 Alert only.

What counts as a raid

Antiraid looks only at people who joined in the last 30 minutes. The signals:

• the same content posted again and again. Photos, GIFs, stickers, links and longer texts weigh more than a short "hi";
• how many messages a minute a single new account sends;
• several new accounts posting right after joining;
• several accounts verified from the same connection;
• accounts caught in raids in other groups in the last 30 days.

A wave of joins alone never sets it off: groups can grow fast. Normal conversation doesn't either. A few accounts make a flood, handled with the Antiflood settings; many make a raid. Names, account age and profile photos aren't signals, and voice messages and polls don't count.

Choose what it does

/settings → 🌊 Flood and raids → Antiraid → 🎚 Mode:

• 🔔 Alert only (default): admins get the alert and decide.
• 🧯 Contain: everyone who joined in the last 30 minutes is muted, even those who didn't post. Nothing is deleted, nobody is banned. ⏱ Muted for is Until an admin unmutes them by default.
• ⚔️ Full response: also does what you turn on under ⚔️ Response to a raid. In order: they're muted, the invite link is revoked (Close the entrances, on), their messages are deleted (off), they're banned (Action set to Ban, for Those who posted or Everyone who joined), and the whole group goes read-only (off).

Apart from read-only, Antiraid never touches long-time members.

Sensitivity and same connection

• 📏 Sensitivity: Auto (default) follows the group's size: High under 1,000 members, Medium up to 20,000, Low above. Or pick Low, Medium or High.
• 🚀 Speed limit: how many messages a minute from one new account count as a signal. Default follows the sensitivity.
• 🔌 Same connection (off): during a raid, in Contain or Full response, turns away accounts arriving from the same connection, from 3 accounts (2 to 20). It's not a ban: they can try again. Whoever passed a Doublegram verification more than 7 days ago is never touched. Mobile networks and offices share one address, so real people can be caught.

The alert and its buttons

The alert reaches the log channel and, in private, the admins who started a chat with @doublegram_captcha_bot. It says what is going on, for example Antiraid — Raid in progress, and why. See Admin alerts.

Its buttons, each with a confirmation: 🚪 Contain new joins, 🔇 Mute new arrivals, 🧹 Delete raid messages, 🚫 Ban who posted, ⛔ Ban all new arrivals, 🔒 Read-only, and to undo: 🔊 Let them speak again, 🔓 Unban them, 🔓 Lift read-only. Only the group's admins can press them.

Admins can send /raid in the group to open the same panel. With no raid going on it says ✅ All quiet. An alert shows up here the moment new arrivals start flooding the chat.

Turn on Tell the members the chat is slowed to post 🛡 A wave of spam from new members is being handled. Posting may be limited for a few minutes. during a raid, changed to ✅ All clear. The group is back to normal. at the end.

When it ends

• After 15 minutes with no new signals the raid becomes Resolved. A confirmed raid where nobody was muted, for example in Alert only, stays open until an admin closes it.
• ✔️ It is over, close: closes it and leaves everything as it is.
• ✅ False alarm: undoes the mutes and the read-only.
• ♻️ Restore config: puts back what was changed. A revoked invite link can't come back: a new one is created.

Permissions it needs

Security needs Ban users, Delete messages and Invite users via link: group info → Edit → Administrators → Security. The menu names change a little between Telegram apps. Without a permission, its buttons don't show. Closing the entrances revokes the main invite link: a public group can still be found by its username, and other admins' invite links keep working.