Introducing the Ban API and Alt Account Detection

Updates Announcements
#667

From the looks of it it works off of userid’s so you could very well for loop say a money datastore and then ban everyone. Main thing is keeping your place clear from any developers who may do that and checking every free model with scripts you insert. Better yet just use a script clearer in console.

for _,p in pairs(game.Workspace.Inserted:GetDescendants()) do if p:IsA("Script") then p:Destroy() end
#668

I had some other accounts that were 2-3 years old. They are now also terminated. and the worst part about those is that I didn’t have emails on them so I can’t get them back.

#669

I wonder why this can’t be done earlier?

#670

How would I know if a player is banned? So I can make a ban/unban system purely on the server?

#671

This actually also happened to me once, it was just due to the exploit that was around during the start of 2023.

1 Like
#672

I suppose this could work, but a built in way of doing it would be much better (especially for games that don’t have a data store to store data for every single player).

1 Like
#675

I understand wanting to have a filter; however, I think certain things should be excluded such as dates and times. A lot of devs, including myself, like to include unban dates in the kick message if the ban is only temporary. Dates and times seem to always trigger the filter.

If you implemented this check into the filter algorithm, that would be of great help.

Example:

Edit: Another, more practical idea would be to add a new settings parameter in the configs called “IncludeUnbanDate” (or something along those lines) which would use the ban’s duration to automatically format and display a date in time in the player’s timezone at the bottom of the kick message. (If the duration is -1 (permanent), this parameter would be ignored).

1 Like
#676

You’ll need to get their ban history and see if the first item in the page has Ban == true
For bans with duration, I’m not sure if you have to compare times or it will log an unban by itself

#677

Thank you for the addition, just in time as I was about to code myself a database for bans.
One question though, how does the alt detection work?
Does it match IP, HWID, or any form of identification?

#678

How would you display who banned the user??

#679

This is a great update and something that I have been waiting for a few years!
Some features that I think should be added are:

  • A boolean parameter in BanAsync that bans the player from all other games owned by the Roblox group or Roblox player that owns the game. (Something like ApplyToOwnerUniverses.)
  • A banned accounts listing feature (listing the alt accounts banned, like returning a table after using BanAsync).
  • I also find these features a good idea to impliment:

Nonetheless, the BanAsync function includes almost as many parameters as I need.

1 Like
#680

This one, no. It would be unfair to be banned from other games by that same dev or any other because of something you did in one particular game. This should be added by the creator instead, the abuse of this great API will be worsened with this feature as even “detected alts” cannot join the game. What if a genuine player gets banned from all places from some unfair bs?

I agree with this. Too many players banned may return a table so large that may crash studios or the calling scripts, if this is implemented it should be split up.

#681

Within either the reason or the private reason

#682

Most likely those or logs somewhere in the system. Tbh they could easily be bypassed via vpns and spoofers

1 Like
#683

The alt account detection system is a joke right now. I have tested it myself and it’s worse than I have thought.

So here is what I have done, since HD admin now uses the Ban API and has an option to ban alt accounts, I have banned one of my alt accounts from my main account, after that I got instantly kicked from the test game. The alt account detection system decided to ban my main account which is the owner of the game in addition to the alt that I banned myself but when I tried to enter the game using a second alt account I was still able to join. Again I’ve tried entering the game with a third alt and I was still able to enter it. All of the 3 alt accounts plus the main account are logged in and can be accessed using the account switcher. This was all done on the same device, at the same time and without attempting to change or spoof addresses.

This proved that it is not hard at all to bypass the alt account detection system and in some cases you don’t even have to try at all. I hope this is going to be addressed and the system is going to be improved.

1 Like
#684

They wouldn’t say officially, since that would inadvertently tell people how to bypass those checks

#685

sir there are two individuals typing on on this post and they have done it forever, plz save them

1 Like
#686

(post deleted by author)

#688

It is very easy to speculate however

#689

I gave you two a pass but this is unacceptable. I have been waiting for days for your replies. I assume they will be ground-breaking. Earth-shattering even.

1 Like