The best Discord verification bots

“Verification bot” is used to describe three genuinely different products, and comparing them as one category is why so many of these comparisons end up vague. Proving a human clicked a captcha is not the same job as knowing whether that human already has three banned accounts, and neither is the same as screening a join by account age and avatar. State which job a server actually needs before ranking anything, and the category stops being confusing.

The distinction that decides which bot you need

Three separate problems share the word “verification”:

1. Real identity linking. Is this joining account the same person as an account already banned or flagged, on this server or across many? This requires a cross-server data asset, not a rule engine.
2. Signal-based join screening. Something about the joining account looks wrong — days old, no avatar, a suspicious username pattern. This is a screen based on attributes, not identity, and it runs on every join whether or not anything is actually wrong.
3. Human-proof gating. Prove a human, not a script, is behind the account — a captcha, essentially — with no claim about who that human is.

A bot built for one of these three can be excellent at it and offer nothing for the other two.

How this ranking was built, and what it is not weighted by

Every capability and price below was read from the vendor’s own site or documentation on 31 August 2026. The ranking weighs:

• Which of the three jobs a bot actually does, checked against its own documentation rather than its marketing language.
• Whether the core capability is free, and what specifically payment unlocks.
• Accessibility and honesty of the verification flow — accessible methods, disclosed false positives, no phishing-shaped prompts.
• Whether protection settings are themselves audited.

It is not weighted by install count, App Directory position, or how loudly a vendor markets itself as a security product.

The comparison

Double Counter — the only real identity layer found in this research

Double Counter (the product formerly sold as AltDentifier — the old domain now redirects here) is the one bot in this comparison doing the hardest of the three jobs. It captures device, browser, network and behavioural signals at join, compares them against a cross-server database built since 2020, and scores the account before approving, flagging or auto-banning it. The core — alt detection, VPN and proxy blocking, three verification modes, and auto-ban configuration — is free forever for the vast majority of communities, by the vendor’s own framing.

Two things are worth stating plainly. The free verification page is ad-supported, and the free verification timeout is two minutes, rising to ten by default and sixty at most on Pro. Double Counter’s Pro price is not published anywhere on the open web — it is sold as a Discord App Subscription, billed and priced entirely inside the Discord client, which is a structural shift worth knowing about: a growing share of Discord bot billing is moving somewhere a price comparison cannot follow it. The vendor’s own documentation is also unusually candid about false positives: a VPN intrusion “is not permanent and only reflected on that server,” and “not all VPN Intrusions are bad” — commonly triggered by ad-blockers, iOS Private Relay, Brave and Opera.

Captcha.bot — the accessible gate, and a rare configuration audit

Captcha.bot proves a human is present; it does not claim to know who that human is. Free gets one verified role, a logs channel and web-only verification, plus anti-phishing enabled by default the moment the bot has Manage Messages — deleting known scam links with no configuration required. Paid, at $4.99/month or $55/year, adds four more verified roles, image verification (accessibility matters here — audio is advertised on the homepage though which tier carries it is unclear), 30 days of analytics history and export.

The genuinely rare feature is its audit log: “an audit log so you can know who has been making changes to the bots configuration,” shown with the prior value, admin-and-owner-only, and explicitly cannot be opted out of. Retention is 14 days; hourly CSV export is the paid part. Of the sixteen moderation and security bots examined across this research, only two — Captcha.bot and the invite-only Zeppelin — record who changed the bot’s own settings at all.

Vulcan — a rigorous verification architecture, if narrowly scoped

Vulcan is built for Web3 communities specifically — token-gated roles across 27 blockchains — but its captcha design is worth understanding regardless of whether a server holds any crypto interest, because the reasoning behind it is the sharpest security argument in this whole category. Vulcan’s verification flow never requests a wallet connection, never asks for a signature, and never sends a DM or a link — everything happens in-server. Its own published comparison table states the point directly: a typical wallet-connect bot’s flow is “indistinguishable from a drainer,” while Vulcan’s “can’t be imitated profitably because at no point does a real Vulcan prompt ask for anything a scammer wants.” Removing the phishing surface rather than defending it is a stronger posture than any captcha in this comparison, and the reasoning transfers well beyond Web3 servers. Everything past the captcha, tickets and giveaways depends on token ownership, a boundary our Vulcan alternatives map in full.

Wick, Sapphire, Security Bot — join screening bundled into a security suite

None of these three link identity or run a human-proof gate on their own — what they share is a signal-based join screen bundled into a broader protection product, free.

Wick screens joins on no-avatar, new-account, username-pattern, advertising and unverified-bot filters, plus undisclosed “suspicious” factors, free, alongside its anti-nuke suite. Sapphire gives away seven Join Guard filters, ANDed together — meaning a join must clear every enabled condition, not just one — for free, alongside a deep moderation and logging engine. Security Bot publishes the most transparent version of this: age, join speed and avatar signals combine into a published 0–100 “normal join” score, free, while its anti-nuke and anti-raid sit alongside it.

Where Vetox’s Join Guard fits

Identity linking and captcha gating are jobs the products above are built for, and this comparison names them rather than stretching Vetox to cover ground that is not where its capability lies. What Vetox does provide, as part of Anti-Raid at Basic ($4.99/month), is signal-based join screening with real expressive depth: up to 10 named conditions, each combining up to 5 rules with AND/OR logic, drawing on account age, avatar, banner and username shape. Paired with it, and free on Starter, Protection’s 20 rule types cover what happens after a join — permission abuse, mass actions, webhook and emoji abuse — and Dashboard Watcher records who changed any of it, free, 500 entries over 90 days, across every system rather than one. For a server that wants join screening sitting inside the same dashboard as the rest of its moderation stack, that is the honest case; for identity linking or a captcha specifically, the products above are the ones built for that job.

Which one to install

Frequently asked questions

What’s the difference between a captcha bot and an alt-detection bot? A captcha proves a human is present and does not claim to know who they are. An alt-detection bot like Double Counter links a joining account to other accounts — its own or another server’s bans — using a cross-server signal database. They solve different problems and a server can need both.

Is there a free Discord verification bot? Yes, in most of the shapes above. Double Counter’s identity linking is free for most communities; Captcha.bot’s captcha and anti-phishing are free at a lower tier of headroom; Sapphire, Wick and Security Bot all give away signal-based join screening free.

Can a verification bot be tricked? Every method has a failure mode. A determined attacker with a human solver defeats a captcha; a brand-new alt with no prior signal footprint can pass an identity check; a signal-based screen can be tuned too loose or too tight. Layering a screen with a captcha closes more gaps than either alone.

Do verification bots record who changes their own settings? Rarely. Of the products examined across this research’s moderation and security domain, only Captcha.bot and the invite-only Zeppelin record configuration changes at all — worth checking directly if an insider changing the protection is part of a server’s threat model.

Should a Web3 server use a general verification bot or one built for token gating? A token-gated community’s real risk is phishing during wallet verification, which is a different problem from proving a human is present. Vulcan’s design — never asking for a signature or a wallet connection — is built specifically for that risk and is worth the narrower scope for a server holding real token value.

Method

Every capability, gate and price above was read from the vendor’s own site or documentation on 31 August 2026. Absence claims are scoped to the seven products examined here.