DEV Community: 虾宝 Xiabao

Cara Membersihkan Iklan Judi Online dan Spam di Grup Telegram

虾宝 Xiabao — Wed, 14 Oct 2026 20:14:12 +0000

Bagi banyak admin grup Telegram di Indonesia, masalah spam yang paling menyebalkan saat ini adalah iklan judi online (sering disebut "judol"). Akun-akun baru masuk, lalu mengirim pesan seperti "gacor hari ini", "slot maxwin", atau "deposit 10rb", lengkap dengan tautan atau nama situs yang ditulis dengan huruf diselang-seling supaya lolos filter.

Panduan ini menjelaskan langkah praktis untuk mengurangi spam judi online dan spam sejenis di grup Telegram, mulai dari pengaturan dasar sampai kebiasaan moderasi.

1. Kenali pola iklan judi online

Sebelum mengatur apa pun, pahami dulu cara mereka bekerja:

Kata kunci yang disamarkan: "s.l.o.t", "g4c0r", "m4xw1n", huruf dipisah spasi atau titik, angka menggantikan huruf.
Tautan tersembunyi: link dalam tombol, teks yang di-hyperlink, atau tautan pemendek (shortlink).
Gambar berisi teks: iklan dalam bentuk gambar supaya filter teks tidak bisa membacanya.
Nama akun sebagai iklan: nama tampilan berisi nama situs, sehingga setiap kali akun itu bergabung, namanya sudah menjadi iklan.
Pesan pribadi (DM): setelah masuk grup, akun tersebut mengirim DM ke anggota satu per satu.

Karena polanya terus berubah, daftar kata kunci saja hampir selalu kalah cepat.

2. Pengaturan dasar grup

Buka profil grup → Edit → Izin (Permissions), lalu:

Matikan "Tambah anggota" untuk anggota biasa, supaya akun spam tidak bisa menarik akun lain.
Batasi kirim tautan dan media untuk anggota baru. Kalau bot admin Anda mendukung, buat anggota baru tidak bisa mengirim link dan gambar selama 24 jam pertama.
Aktifkan mode lambat (Slow Mode) 10–30 detik jika grup sering dibanjiri pesan.
Pastikan hanya admin yang bisa mengubah info grup dan menyematkan pesan.

3. Verifikasi saat bergabung

Sebagian besar akun spam judi dibuat dan dijalankan secara otomatis. Verifikasi sederhana bisa menyaring banyak dari mereka:

Tombol verifikasi: anggota baru harus menekan tombol dalam waktu tertentu, jika tidak akan dikeluarkan.
Pertanyaan sederhana: misalnya "Grup ini membahas apa?" dengan pilihan jawaban.
Persetujuan admin (join request): untuk grup yang sering diserang, aktifkan persetujuan anggota baru dan tolak akun dengan nama mencurigakan.

4. Menangani akun yang sudah masuk

Jika iklan sudah terlanjur muncul:

Hapus pesan dan blokir akunnya sekaligus. Saat memblokir, centang opsi untuk menghapus semua pesan dari pengguna tersebut.
Cek anggota yang bergabung di waktu yang sama. Akun spam sering masuk berombongan; periksa daftar anggota terbaru.
Periksa nama tampilan anggota. Akun dengan nama situs judi sebaiknya langsung dikeluarkan, walaupun belum mengirim pesan.
Ganti tautan undangan jika banyak akun spam masuk lewat tautan yang sama.

5. Lindungi anggota dari DM

Spam di grup bisa dihapus, tetapi DM ke anggota tidak bisa dikontrol admin. Yang bisa dilakukan:

Sematkan pesan: "Admin tidak pernah mengirim DM duluan. Abaikan dan laporkan DM yang menawarkan judi, investasi, atau pinjaman."
Ingatkan anggota untuk mengatur privasi: Pengaturan → Privasi dan Keamanan → Grup & Channel, agar tidak bisa dimasukkan ke grup lain sembarangan.
Minta anggota melaporkan akun yang mengirim DM spam, supaya admin bisa memblokirnya dari grup juga.

6. Mengapa filter kata kunci saja tidak cukup

Banyak bot admin menyediakan filter kata kunci. Ini membantu untuk kata-kata yang jelas, tetapi:

"slot" bisa ditulis puluhan cara berbeda.
Kata kunci yang terlalu luas akan menghapus pesan normal (misalnya diskusi tentang "slot waktu" atau "slot memori").
Iklan dalam bentuk gambar sama sekali tidak terbaca.

Karena itu, banyak admin sekarang memakai bot anti-spam yang menilai maksud pesan, bukan hanya mencocokkan kata. Salah satunya adalah Xiabao (@xiabaotg_bot), bot anti-iklan yang gratis untuk pemilik grup. Bot ini dirancang untuk mengenali iklan yang disamarkan dengan huruf diselang-seling atau karakter pengganti, sehingga cocok untuk menghadapi pola iklan judi online.

7. Rutinitas moderasi mingguan

Agar grup tetap bersih dalam jangka panjang:

Setiap hari: cek daftar anggota baru dan pesan yang dilaporkan.
Setiap minggu: lihat log "Recent Actions" untuk memastikan bot tidak salah menghapus pesan anggota yang sah.
Setiap bulan: ganti tautan undangan publik jika spam mulai meningkat, dan perbarui pesan tersemat.

7a. Membagi tugas antar admin

Untuk grup besar, jangan biarkan satu orang menangani semuanya. Bagi tugas dengan jelas: satu admin memeriksa permintaan bergabung dan anggota baru, satu admin memantau laporan dari anggota, dan satu admin meninjau hasil kerja bot setiap minggu. Buat grup kecil khusus admin untuk berkoordinasi, dan catat keputusan penting di sana, misalnya akun mana yang diblokir dan alasannya. Dengan pembagian seperti ini, spam bisa ditangani lebih cepat, terutama pada malam hari atau akhir pekan ketika serangan sering terjadi. Pastikan juga setiap admin mengaktifkan verifikasi dua langkah di akun Telegram mereka, karena akun admin yang dibobol bisa dipakai untuk menyebarkan iklan judi dengan wewenang penuh.

8. Daftar periksa singkat

[ ] "Tambah anggota" dimatikan untuk anggota biasa
[ ] Anggota baru tidak bisa kirim link dan media di hari pertama
[ ] Verifikasi saat bergabung aktif
[ ] Pesan tersemat tentang bahaya DM
[ ] Bot anti-spam yang mengenali iklan tersamar
[ ] Rutinitas cek harian dan mingguan

Spam judi online tidak akan hilang sepenuhnya, tetapi dengan pengaturan yang tepat, grup Anda tidak akan lagi menjadi papan iklan gratis bagi mereka.

Using Telegram's "Recent Actions" Log to Investigate Moderation Incidents

虾宝 Xiabao — Wed, 14 Oct 2026 20:08:53 +0000

Something went wrong in your Telegram group overnight. Messages are missing, a few long-time members say they were removed, and nobody on the admin team remembers doing anything. Before guessing, open the one tool built exactly for this situation: the Recent Actions log (also called the admin log or event log).

This tutorial explains what the log records, how to filter it, and how to turn it into a simple, repeatable incident review.

What Recent Actions records

Recent Actions is available in supergroups and channels to admins. It keeps a record of administrative events from roughly the last 48 hours, including:

Messages deleted by admins or bots (with the original content)
Messages edited (old and new versions)
Members joining, leaving, being restricted, banned or unbanned
Admin rights granted, changed or removed
Changes to group title, photo, description, username and invite links
Pinned and unpinned messages
Changes to permissions and slow mode

It does not record ordinary messages that nobody touched, and it does not keep anything older than about two days. That second point matters: if you want to investigate something, do it quickly or take screenshots.

How to open it

Open the group and tap its name to see the profile.
Tap Edit (or the pencil icon on desktop).
Choose Recent Actions.

On desktop clients the log is often under the group's management menu with the same name.

Filtering: the key to making the log useful

In a busy group the raw log is long. Use the filter button at the top:

By event type: e.g. only "Deleted messages" or only "Members and admins".
By admin: show only what one specific admin (or bot) did.

A good habit is to start broad (all events in the time window you care about), then narrow to the specific admin or event type once you see a pattern.

Common investigations and how to approach them

"A member says they were banned for no reason"

Filter by Members and search for the person's name.
Find the ban or restriction event; note which admin or bot did it and when.
Look a few lines above: was a message from that member deleted just before? The log shows the original text, so you can see what triggered it.
If it was a mistake, unban, apologize briefly, and note the pattern so it doesn't repeat.

"Messages disappeared"

Filter by Deleted messages.
Check who deleted them. If it was a bot, the cause is likely a filter rule; if it was an admin, ask them directly.
Restore important content by reposting it (the log shows the original text).

"Someone changed the group description / pinned a strange link"

Filter by Group info and Pinned messages.
Identify the account that made the change. If it's an admin who claims they didn't do it, treat it as a possible compromised account: remove that admin's rights first, investigate after.

"We were raided and need to know who got in"

Filter by New members for the time window of the raid.
Note the join timestamps; accounts that joined within a minute or two of each other are usually the raid batch.
Use this list to ban the remaining accounts that weren't caught yet.

Turning the log into an incident review

For anything bigger than a single mistaken ban, write a short review in your admin chat. A template:

Incident: [one line]
Time window: [start – end, timezone]
What the log shows: [key events, who/what did them]
Impact: [members removed, messages lost, links exposed]
Fixed: [what was restored or reversed]
Prevent next time: [one or two changes]

Five minutes of writing this up saves the next admin from repeating the same investigation.

Using the log to tune your bots

Bots appear in Recent Actions like any admin. Once a week, filter by your anti-spam bot and skim its deletions:

False positives: legitimate messages deleted. Adjust rules or whitelist trusted members.
Missed spam: ads deleted manually by humans that the bot let through. These show where your filters are weak.

If you find that most manual deletions are ads written with tricks such as spaced-out letters or look-alike characters, a keyword list will keep losing. A semantic anti-spam bot like Xiabao (@xiabaotg_bot), which is free for group owners, is designed for exactly that kind of disguised ad, and its actions show up in the same log so you can audit them.

Limitations to keep in mind

48-hour window: investigate promptly or export screenshots.
Only admin-visible: regular members can't see it, so they can't verify what happened. Communicate outcomes clearly.
Not a full chat archive: if you need long-term records, use a logging bot or export chat history from Telegram Desktop.

Quick checklist

[ ] All admins know where Recent Actions is
[ ] Incidents are checked within 48 hours
[ ] Filters used by event type and by admin
[ ] Short written review for serious incidents
[ ] Weekly skim of bot actions for false positives and misses

The Recent Actions log turns "something weird happened" into a clear timeline. Used regularly, it also becomes the best data you have for improving your moderation setup.

Telegram 群管理员账号被盗怎么办：管理员账号安全设置与应急处理

虾宝 Xiabao — Wed, 14 Oct 2026 20:03:06 +0000

很多群主花了很多心思防广告、防刷屏，却忽略了一个更危险的入口：管理员自己的账号。一旦某个有“封禁成员”“修改群信息”权限的管理员账号被盗，攻击者可以在几分钟内踢光成员、改掉群名和简介、置顶诈骗链接，甚至把群转卖。和普通广告比，这种损失往往是不可逆的。

这篇教程分两部分：先讲怎么把管理员账号设置得足够安全，再讲万一出事该按什么顺序处理。

一、管理员账号最常见的被盗方式

了解攻击方式，才知道防什么：

钓鱼登录页：对方私聊发来“群组认证”“领取会员”“投票帮忙”之类的链接，页面要求输入手机号和验证码，验证码一交出去账号就没了。
转发验证码：冒充 Telegram 官方或熟人，让你“把刚收到的数字发给我确认一下”。
恶意文件：伪装成表格、安装包的木马，盗取电脑端的登录会话。
共用设备：在网吧、公司电脑登录 Telegram 后没有退出。
SIM 卡劫持：攻击者通过运营商补办你的手机卡，从而接收验证码。

要记住一条原则：Telegram 官方永远不会在私聊里向你要验证码或密码。

二、每个管理员都应该完成的五项设置

建议群主把下面这份清单发给所有管理员，要求逐项完成：

开启两步验证：设置 → 隐私与安全 → 两步验证。设置一个只用于 Telegram 的密码，并绑定一个可用的恢复邮箱。这样即使验证码泄露，没有密码也登录不了。
检查活跃会话：设置 → 设备（Devices）。把不认识的、很久没用的会话全部终止。建议每月看一次。
设置自动终止旧会话：在设备页面里，把“自动终止会话”设为 1 个月或 3 个月未活动。
隐藏手机号：隐私设置里把“手机号码”设为“没有人”，并关闭“通过手机号找到我”，降低被定向攻击的可能。
开启本地密码锁：手机丢了的时候，至少不会被人直接打开 Telegram。

三、权限最小化：别给每个管理员“全部权限”

很多群主习惯一次性把所有权限都勾上，这样任何一个管理员账号出事，都等于群主账号出事。更稳妥的分法是：

角色	建议权限	不给的权限
日常管理员	删除消息、封禁用户、置顶消息	修改群信息、添加新管理员
资深管理员	以上 + 邀请用户、管理话题	添加新管理员
群主（仅一人）	全部	—

特别是 “添加新管理员” 这一项，最好只有群主自己有。攻击者拿到管理员账号后，第一件事往往就是把自己的其他小号提为管理员，留后门。

另外，机器人类管理员也只给它需要的权限。比如反广告机器人只需要删除消息和封禁用户，不需要修改群信息。

四、出事了：管理员账号被盗后的处理顺序

如果你发现某个管理员账号突然开始乱踢人、发奇怪链接、改群名，按下面顺序处理，越快越好：

群主立刻撤销该账号的管理员权限。这一步优先于一切，不要先去私聊问情况。
检查并撤销最近新增的管理员。打开管理员列表，看是否有陌生账号被提权。
查看“最近操作”（Recent Actions）：在群管理页面里能看到 48 小时内管理员做过的事——踢了谁、删了什么、改了什么。截图保存。
恢复群信息：群名、头像、简介、置顶消息，按之前的样子改回去。
撤销并重新生成邀请链接，防止攻击者已经把链接拿去用了。
通知成员：发一条置顶公告，说明“某管理员账号被盗，期间的私聊和链接一律不要相信”。
把被误踢的成员拉回来：根据最近操作里的记录，解除封禁，并把新链接发给他们。
被盗的管理员本人：通过其他设备终止所有会话、修改两步验证密码；如果已经完全登录不上，联系 Telegram 支持找回。

五、群主账号本身的保护

群主账号是最后一道防线，要比管理员更严格：

两步验证密码要长，并且不要和其他网站重复。
恢复邮箱本身也要开启二次验证。
尽量不在陌生设备上登录群主账号，日常管理可以用一个单独的管理员账号。
不点击任何私聊里的“验证”“认证”链接。

六、减少“人”的工作量，也是降低风险

管理员越多、手动操作越多，被钓鱼的面就越大。把重复性工作交给可靠的工具，能让你少一些需要高权限的人手。比如删广告、封广告号这类工作，可以交给虾宝反广告机器人（@xiabaotg_bot），对群主免费，它只需要删除消息和封禁用户两项权限，不需要碰群信息和管理员设置。

七、一页纸清单

[ ] 所有管理员已开两步验证并绑定恢复邮箱
[ ] 每月检查一次活跃会话
[ ] 手机号对所有人隐藏
[ ] “添加新管理员”只有群主有
[ ] 机器人只给最小权限
[ ] 准备好被盗后的处理顺序，并告诉所有管理员

结语

广告和刷屏只是让群变难看，管理员账号被盗却可能让群直接没了。花半小时把这些设置做好，比事后补救要轻松得多。

Protecting Telegram Group Members from Scam DMs: A Practical Guide for Admins

虾宝 Xiabao — Wed, 14 Oct 2026 13:04:19 +0000

Most group owners think about spam in the group itself. The more damaging problem often happens out of sight: scammers join a public group, harvest the member list, and DM people pretending to be an admin, a "support agent", or a giveaway sponsor. By the time someone reports it, several members may have already lost money or accounts.

How the scam usually works

A fresh account joins, stays quiet, and copies the group name and avatar into its own profile.
It DMs members who recently asked a question ("Hi, I'm from the support team, I saw your message…").
It pushes a link to a fake wallet "verification", a phishing login page, or a paid "VIP" channel.

The group itself looks clean, which is exactly why this is easy to miss.

What you can configure today

Hide the member list. In group settings, restrict who can see members (available for larger supergroups). This removes the easiest harvesting route.
Restrict new members. Disallow links and media for newcomers for the first day or so; scam accounts rarely wait that long.
Use join verification. A simple captcha or "press the button" check filters a large share of automated accounts.
Pin a clear warning. "Admins will never DM you first. Never send codes or seed phrases." Short and in every language your group uses.
Keep the admin list short and public. Members should be able to check whether "admin Alex" is real in one tap.

Teach members a 10-second check

Does the account's username match the one listed in the pinned admin list (not just the display name)?
Did they message you first? Treat it as a scam by default.
Are they asking for a code, a seed phrase, a payment, or a "verification" link? Stop.

Handling reports

Ask members to forward the scam DM to an admin, then ban the account from the group and report it to Telegram. Keep a short shared note of new patterns (fake names, reused avatars, domains) so other admins recognise them.

Automating the in-group part

Scammers often post a "teaser" in the group first, a hidden link or a button pointing to their bot. An anti-ad bot catches these before members click. I use 虾宝 (Xiabao), an anti-ad bot that's free for group owners and recognises disguised ads and suspicious links rather than only fixed keywords. It doesn't replace the settings above, but it closes the gap that settings can't.

Scam DMs can't be fully blocked from the admin side, but hiding members, slowing down new accounts, and educating your group cuts the success rate dramatically.