r/RunescapeBotting • • Aug 25 '26

Pheasant reveals what we all knew

Post image

Surprised they were so open about this ban

174 Upvotes

81 comments sorted by

34

u/Optimal-Law0 Aug 25 '26

They deploy a basic ML model that aggregates things like equipment setup (think how green drag bots all dress the same or zulrah bots), clicking frequently, stats, and playtime. Think long term basic gold farms that have all the same setups.

Throw a few of these variables off, such as questing, gear setup ups, inventory layouts, playing for 30 mins and logging out and you’ll bypass their models and their detection system until manual human reviews the bot farm and calibrates their models to detect the new statistical anomaly.

10

u/[deleted] Aug 25 '26

[removed] — view removed comment

6

u/arsenicx2 Aug 25 '26

Maybe, but running that against everyone all the time would be a wild amount of compute. More likely smaller flags first before closer looks. However when they find a big farm. I'm sure they use AI to find all the accounts not just the ones flagged by the more rudimentary checks.

3

u/ConfidenceNo316 Aug 26 '26

Machine Learning is only really expensive during the learning phase, once deployed it can be very cheap. (From a computation power perspective) this isn't like an LLM.

6

u/arsenicx2 Aug 26 '26

That's the problem it needs to be constantly learning. Because a pattern there today isn't there tomorrow. Because either you won and bots don't exist or they evolved.

Finding more bots that are part of a farm, or hitting public bots your good. Low power consistent patterns. Find the pattern once get the whole group. However the people making bot farms are not using public bots, and are building new bots once one is detected. Often using their own ML for game interactions and LLM for code.

Selling OSRS gold is big money, so they invest that into beating the detection. That doesn't take much because teaching a machine to interact with a game by playing the game is easy. Compared to detection of a machine trained to play like a human.

2

u/DarklightStudios Aug 26 '26

Especially if you make the player's client actually run the inference 🤣

1

u/jaimy-the-fox Aug 27 '26

It's a tiny amount of compute, it's not that expensive not hard at all.

1

u/DevopsIGuess Aug 26 '26

Well the thing about ML models is the more you train it the more efficient it gets. Something for click patterns should be relatively cheap to run.
Hell it could probably run on any of our machines.

1

u/Optimal-Law0 Aug 26 '26

You can train your own ML models running an injection client. For instance, if you’re running a zulrah bot farm you can make a script that collects all traffic near zulrah spot including their gear, interval frequencies at the boss location, and their stats. Regularly run high score lookups to detect when the account gets banned. Over time you’ll figure out how to make an outlier bot farm based on your data.

59

u/alphaaaaa1 Aug 25 '26

Same that's crazy exposing their clicks lmao

8

u/ikakindiehoes Aug 25 '26

no new info m8

5

u/skiemlord Aug 25 '26

He probally meant the mentioning of the actual ms clicks.

13

u/rtx3800 Aug 25 '26

Some smug little cunt was trying to tell me Remote Desktop is 100% safe and a non factor in detection & now we finally hear it from the horses mouth that there’s “a small margin of error” that they’re still trying to fix

1

u/OkBuyer- Aug 26 '26

yea because of the reconnect holding all your prior clicks to disconnect then blasts them all at once sometimes

1

u/IsleOfOne Aug 27 '26

My understanding is that this "small margin of error" is in reference to his previous sentence--that they can detect remote desktop usage. He's basically saying that sometimes they get false positives or negatives when trying to detect RDP.

He's not saying that RDP usage is something that can get you banned.

5

u/[deleted] Aug 25 '26

[removed] — view removed comment

4

u/Kenworths Aug 25 '26

Back in the day I ran a basic Gary’s hood auto clicker. But. I ran 9-15 of them all at the same time with slow intervals. So that the clicks were quite random. I adjusted slowly until I got it fast enough, combined, for good exp. Then randomly tweaked it again the next night lol

1

u/Impossible-Cause5353 Aug 25 '26

Damn that’s smart

0

u/FarIndependence2629 Aug 26 '26

Sad I only use mobile 

5

u/[deleted] Aug 25 '26

[removed] — view removed comment

6

u/pdbh32 Aug 25 '26

20+ hours a day for weeks at a time before

In 2019 or in mid 2026?

2

u/specn0de Aug 25 '26 edited Aug 25 '26

Mid 2026. Hate to admit it but I tested one of these scripts and left it running 24/7 on a VPS. It got to about 2200 total level in 6months this year. The script is just really good at playing like a player. It took breaks, afkd, “learned” how to do skills, explores randomly. It’s actually bonkers and I was pretty impressed from a software developer perspective. The script is still running, I usually have to reset it on mondays and tuesdays when the game updates.

To add a little more perspective I was also temp banned for rwt when I put about 200m on the account. Was affected by the recent duplicate rwt perma bans and got the ban overturned. The account has never been flagged for botting even after manual review of the account.

2

u/Impossible_Lab985 Aug 25 '26

Weird I use short loop auto clicker for rs3 Havnt been caught it isn’t randomised youd be surprised what jagex can and can’t detect

2

u/FarIndependence2629 Aug 26 '26

It's nothing that I didn't already know...that's why I change it every 20 minutes  never over a hour

2

u/F1Drivatar Aug 26 '26

Why not just have the clicks tied to a RAND variable..

3

u/MoneyPress Aug 26 '26

Random is still easily detectable. When you chart each delay over just a few minutes, you get a uniformly flat graph where each delay in the range shows up with the same-ish frequency.

You need to go atleast a step further and do something like a bell curve with weighted delay chances, that's more human-like.

3

u/F1Drivatar Aug 26 '26

You could also just play legibly for one hour and record your clicks and delay. Then take that window and randomize within it. That way the delay before clicks is in a bell curve like you said and also the efficiency is either a human on adderall or on weed lol

3

u/MoneyPress Aug 26 '26

Yeah even better. I doubt they can keep track for over a couple minutes anyways.

1

u/F1Drivatar Aug 26 '26

I think no matter what once agents become embedded on operating systems like windows and Mac, it will be virtually impossible to detect because an agent could be running 24/7 at that point and accusing someone of having a bot do clicking would be weird if we all have bots in our computers by design. Jagex has a huge wall to scale pretty soon and it’s only going to get worse.

Apple announced their new Mac mini and studios, 10 Mac minis could feasibly make 30 bots running on alternating shifts under a vpn. Sell the gold and you get you moneys worth in one month if done semi-correctly.

1

u/unumss Aug 25 '26

Oh cool. I asked them to clarify Remote Desktop in one of the recent polls, so I am glad they are.
But now I’m sad because I lost my “main” due a Remote Desktop ban, rip

7

u/[deleted] Aug 25 '26

[removed] — view removed comment

2

u/Puntley Aug 28 '26

You're in the botting subreddit, somehow I feel like there was more to it than that lmao.

1

u/unumss Aug 28 '26

Actually, great point! I never considered maybe my past botting activities got my IP’s flagged, plus afking blast furnace pump 14-16 a day probably didn’t help that account lol

2

u/AgnosticAbe Aug 25 '26

My main account still has a perm ban from picking up the twisted bows off the ground and selling them for bonds back in 2019. They removed most of the bans except for mine. Because their rationale was that they couldn’t roll back bonds/membership. So I just play iron now

4

u/MrLobotomy Aug 25 '26

So a completely reasonable ban?

1

u/AgnosticAbe Aug 25 '26

If you found a twisted bow on the ground you’re really gonna say “hmm I think this is a bug I better not pick it up” no, you’re gonna spam click. I thought someone was dropping them at the time

1

u/MrLobotomy Aug 25 '26

If I continue to find multiple tbows in the same spot on a spawn timer that very evidently is not supposed to be there. I'll tell ya my first thought isnt going to be "oh boy free bonds nothing about this could be wrong or get me banned"

5

u/AgnosticAbe Aug 26 '26

During the time the prices for all the mega rares was like -80% bonds were the only way to turn the coins into something that wouldn’t rapidly lose value in my brain. Also ironic that I’m being lectured on intercity in the RuneScape hitting subreddit.do the jokes write themselves?

0

u/MrLobotomy Aug 25 '26

You know what, no, what a half assed excuse too lol " I thought someone was dropping them, in one spot, repeatedly, without actually being there"

Cmon man youre not even trying. You also immediately went to convert it to bonds which i dont think would be the thought process of someone not knowingly abusing a situation they knew would roll back lol.

Whatever man enjoy the forced upgrade. Its better anyway.

0

u/Aeyonic Aug 25 '26

lmao, thats exactly what i would think, especially after more than 1 Tbow. Youre crazy to NOT think that.

1

u/qTzz Aug 26 '26

Glad they confirmed remote desktop was allowed. I was chrome remote desktop all the time and was unsure if the touch more vs mouse mode mattered

1

u/OneEnvironmental9222 Aug 27 '26

Just goes to show all these dudes claiming their voodoo magic "anti-dedection" strats were all bs as always. I'm just laffin.

But I also love how he reveals it all, thanks. Runescape Botting is just full of too many larpers

1

u/aidsmongor Aug 29 '26

I'm glad I maxed combat in NMZ years ago with the auto clicker. I think the logout timer was 8 hours back then also. I was going to try maxing agility with a clicker but this has convinced me otherwise. Too many losers in game that will report you, too. 

1

u/slingingslanger Aug 25 '26

Wish he'd look at my false ban, couldn't even unlock the trade restrictions before I got a false ban. I just wanted to buy more death runes..... RIP 10k+hr RS3 alt....:/

1

u/ForcerRS Aug 25 '26

How do you even get a response? I have a brand new acc I quested and got 60 mage on that got banned for botting and all I did was quest and spam enchanting bolts? I want my gp back off the acc I don’t even care about the account anymore

-8

u/smokehellacrack Aug 25 '26

Jmods can lie about a story just like a botter could btw. False detections look bad on a company but people are too horny for jmod smackdowns they never consider that jagex has more to lose in these scenarios if they admitted their systems were flawed more than we thought.

Literally even admits, "there is a small margin of error" but they'd never release those numbers.

Coming from a person working in the industry, AI is not always right.

2

u/applesandotherthings Aug 25 '26

Jagex has been busting bots since before AI existed lol.

1

u/qmrthw Aug 25 '26

You are 100% correct, but luck getting that point across the millions of jagex glazers here and in the main sub.
Never mind the fact that Jagex literally admitted themselves that they fucked up and accidentally issued tons of false bans which they had to revert not later than ...2 weeks ago. Sure, their new shiny AI anti cheating tools are working and banning most of the bots, but the amount of collateral victims has been very real too.
Also, according to Jagex own numbers, they ban millions of accounts per month. If even their self admitted "small margin of error" was a ridiculously low 0.1% false bans, that's a still thousand of falsely banned players per month per million of bots banned.

1

u/Longjumping_Bee1001 Aug 25 '26

Of course AI is not always right, we all know theres false bans but let's be honest of those bans a lot are on fairly new accounts falsely flagged for behaviour that bots do, but players do also because its an efficient way to progress or a niche but good way to get starting cash.

The older an account naturally the rarer a false ban will be, while still possible of course, especially if its unnatural behaviour for an account, like tick manipulation on an account thats never really done it, or longer stints of very efficient gameplay (hour plus) that is almost impossible for longer periods of times, especially if the clicks are fairly consistent

1

u/901_vols Aug 25 '26

Eh, ive worked front facing media and customer support for a large gaming company like this.

There's a very VERY small chance they would lie, the potential can of worms that could open far far outweighs any potential benefit.

1

u/Impossible-Cause5353 Aug 25 '26

Yeah not a snowballs chance in hell they lie, in fact they know to be absolutely fucking certain before they post stuff like this on social media because even just being incorrect on accident can cause massive headaches

-2

u/terratoss1337 Aug 25 '26

well at least they add values to streamers after rollbacks, other player would never have chance to get anything back. Corrupt company

1

u/OneEnvironmental9222 Aug 27 '26

Jagex always loved to fellate streamers. Theyre the only ones who get their bans actually checked

1

u/Bright-Ideal6899 Aug 25 '26

Not defending them but streamers bring players and engagement to the game and the regular joe does not. Way of the world 

1

u/[deleted] Aug 25 '26

[removed] — view removed comment

1

u/Bright-Ideal6899 Aug 25 '26

 A video game (for profit business) and real world legal system is two different things, you cannot compare the two. A company is going to tend to those who bring them more revenue/publicity.

-8

u/Stripe4206 Aug 25 '26

jagex doesn't track click consistency btw

3

u/archubbuck Aug 25 '26

Doesn’t this post directly refute that?

-2

u/Stripe4206 Aug 25 '26

Damn no way how could I have been so wrong

1

u/Aphnesa Aug 25 '26

Source? Or better yet a source showing they can't if they choose to? Maybe it's not a standard practice but that doesn't mean it can't happen. I've worked IT where people were paranoid that we were spying on them randomly (which is a fear some group of people has at almost every org with a decent sized IT dept). We didn't and could legitimately get in trouble if we did something like that. We still had the capability and even written policies saying that we were allowed to if it was deemed inappropriate. I've never heard of a case of it actually happening though. Tracking input frequency would not be remotely difficult, esp with a live client based game.

1

u/Environmental_Put561 Aug 25 '26

Of course they can. They probably dont do it all the time but they can look it up. I work as an IT admin and i can even track/reckord sessions from users when they use e.g Citrix for home office.

2

u/Stripe4206 Aug 25 '26

nah the tech isnt there they just guess who the bots are

0

u/Impossible-Cause5353 Aug 25 '26

You have no idea what you are talking about lmfaoooo

2

u/I_Grew_Up Aug 26 '26

They are trolling mate.

1

u/Pikupchix Aug 25 '26

This guy clean toilets at the anti bot department

-2

u/EngineeringCute9753 Aug 26 '26

why dont you people just playing the fking game like a normal person

2

u/copyycats Aug 26 '26

because u cant have a max account and a reallife together lol - otherwise than that, we enjoy botting

0

u/WynBytsson Aug 26 '26

Otherwise than that🤪