# The best Discord verification bots

> The best Discord verification bots across identity linking, join screening and captcha gates. Vetox's Join Guard is the deepest of the set on rule logic.

- Canonical: https://discordbots.blog/blog/best-discord-verification-bots
- Published: 2026-08-31
- Author: The Field Guide desk
- Competitor facts checked: 2026-08-31
- Sources:
  - doublecounter.gg (https://doublecounter.gg/) — checked 2026-08-31
  - docs.doublecounter.gg — alt detections and VPN intrusions (https://docs.doublecounter.gg/double-counter-en/alt-detections-and-vpn-intrusions.md) — checked 2026-08-31
  - captcha.bot — premium (https://captcha.bot/premium) — checked 2026-08-31
  - docs.captcha.bot — audit log (https://docs.captcha.bot/logging/audit-log) — checked 2026-08-31
  - vulcan.xyz (https://www.vulcan.xyz/) — checked 2026-08-31
  - wickbot.com — premium (https://wickbot.com/premium) — checked 2026-08-31
  - docs.sapph.xyz — automoderation (https://docs.sapph.xyz/automoderation.md) — checked 2026-08-31
  - securitybot.gg — premium (https://securitybot.gg/premium) — checked 2026-08-31
- Publication: The Field Guide, an independent site not affiliated with Discord Inc.

---
"Verification bot" is used to describe three genuinely different products, and comparing them as
one category is why so many of these comparisons end up vague. Proving a human clicked a captcha
is not the same job as knowing whether that human already has three banned accounts, and neither
is the same as screening a join by account age and avatar. **State which job a server actually
needs before ranking anything, and the category stops being confusing.**

## The distinction that decides which bot you need

Three separate problems share the word "verification":

1. **Real identity linking.** Is this joining account the same person as an account already
   banned or flagged, on this server or across many? This requires a cross-server data asset, not
   a rule engine.
2. **Signal-based join screening.** Something about the joining account looks wrong — days old,
   no avatar, a suspicious username pattern. This is a screen based on attributes, not identity,
   and it runs on every join whether or not anything is actually wrong.
3. **Human-proof gating.** Prove a human, not a script, is behind the account — a captcha,
   essentially — with no claim about who that human is.

A bot built for one of these three can be excellent at it and offer nothing for the other two.

## How this ranking was built, and what it is not weighted by

Every capability and price below was read from the vendor's own site or documentation on 31
August 2026. The ranking weighs:

- **Which of the three jobs a bot actually does**, checked against its own documentation rather
  than its marketing language.
- **Whether the core capability is free**, and what specifically payment unlocks.
- **Accessibility and honesty of the verification flow** — accessible methods, disclosed false
  positives, no phishing-shaped prompts.
- **Whether protection settings are themselves audited.**

It is **not** weighted by install count, App Directory position, or how loudly a vendor markets
itself as a security product.

## The comparison

| Bot                                                  | Real identity linking              | Signal-based screening                 | Human-proof gate                          | Entry price                         |
| ---------------------------------------------------- | ---------------------------------- | -------------------------------------- | ----------------------------------------- | ----------------------------------- |
| [Double Counter](https://doublecounter.gg/)          | **Yes — cross-server database**    | Yes, free                              | no                                        | free; Pro priced inside Discord     |
| [Captcha.bot](https://captcha.bot/premium)           | no                                 | Suspicious-account flagging only       | **Yes — web, image, audio**               | free; $4.99/mo                      |
| [Vulcan](https://www.vulcan.xyz/) (Web3-scoped)      | no — matches wallets, not identity | no                                     | **In-Discord captcha, no external links** | free, "every feature on every plan" |
| [Wick](https://wickbot.com/premium)                  | no                                 | **Free, several undisclosed factors**  | no                                        | $5/mo (bundled with anti-nuke)      |
| [Sapphire](https://docs.sapph.xyz/automoderation.md) | no                                 | **Free — 7 Join Guard filters, ANDed** | no                                        | €2.99/mo limit increase             |
| [Security Bot](https://securitybot.gg/premium)       | no                                 | **Free — 0–100 published score**       | no                                        | $3.49/mo                            |
| Vetox                                                | no                                 | **Free screen, paid raid detection**   | no                                        | free; $4.99/mo Basic (Anti-Raid)    |

## Double Counter — the only real identity layer found in this research

[Double Counter](https://doublecounter.gg/) (the product formerly sold as AltDentifier — the old
domain now redirects here) is the one bot in this comparison doing the hardest of the three jobs.
It captures device, browser, network and behavioural signals at join, compares them against a
cross-server database built since 2020, and scores the account before approving, flagging or
auto-banning it. The core — alt detection, VPN and proxy blocking, three verification modes, and
auto-ban configuration — is **free forever for the vast majority of communities**, by the
vendor's own framing.

Two things are worth stating plainly. **The free verification page is ad-supported**, and the
free verification timeout is two minutes, rising to ten by default and sixty at most on Pro.
**Double Counter's Pro price is not published anywhere on the open web** — it is sold as a
Discord App Subscription, billed and priced entirely inside the Discord client, which is a
structural shift worth knowing about: a growing share of Discord bot billing is moving somewhere
a price comparison cannot follow it. The vendor's own documentation is also unusually candid about
false positives: a VPN intrusion "is not permanent and only reflected on that server," and "not
all VPN Intrusions are bad" — commonly triggered by ad-blockers, iOS Private Relay, Brave and
Opera.

## Captcha.bot — the accessible gate, and a rare configuration audit

[Captcha.bot](https://captcha.bot/premium) proves a human is present; it does not claim to know
who that human is. Free gets one verified role, a logs channel and web-only verification, plus
**anti-phishing enabled by default** the moment the bot has Manage Messages — deleting known scam
links with no configuration required. Paid, at $4.99/month or $55/year, adds four more verified
roles, image verification (accessibility matters here — audio is advertised on the homepage
though which tier carries it is unclear), 30 days of analytics history and export.

The genuinely rare feature is its **audit log**: "an audit log so you can know who has been
making changes to the bots configuration," shown with the prior value, admin-and-owner-only, and
explicitly **cannot be opted out of**. Retention is 14 days; hourly CSV export is the paid part.
Of the sixteen moderation and security bots examined across this research, only two — Captcha.bot
and the invite-only Zeppelin — record who changed the bot's own settings at all.

## Vulcan — a rigorous verification architecture, if narrowly scoped

[Vulcan](https://www.vulcan.xyz/) is built for Web3 communities specifically — token-gated roles
across 27 blockchains — but its captcha design is worth understanding regardless of whether a
server holds any crypto interest, because the reasoning behind it is the sharpest security
argument in this whole category. Vulcan's verification flow **never requests a wallet
connection, never asks for a signature, and never sends a DM or a link** — everything happens
in-server. Its own published comparison table states the point directly: a typical wallet-connect
bot's flow is "indistinguishable from a drainer," while Vulcan's "can't be imitated profitably
because at no point does a real Vulcan prompt ask for anything a scammer wants." Removing the
phishing surface rather than defending it is a stronger posture than any captcha in this
comparison, and the reasoning transfers well beyond Web3 servers. Everything past the captcha,
tickets and giveaways depends on token ownership, a boundary [our Vulcan
alternatives](/blog/vulcan-alternatives) map in full.

## Wick, Sapphire, Security Bot — join screening bundled into a security suite

None of these three link identity or run a human-proof gate on their own — what they share is a
**signal-based join screen** bundled into a broader protection product, free.

**Wick** screens joins on no-avatar, new-account, username-pattern, advertising and unverified-bot
filters, plus undisclosed "suspicious" factors, free, alongside its anti-nuke suite.
**Sapphire** gives away **seven Join Guard filters, ANDed together** — meaning a join must clear
every enabled condition, not just one — for free, alongside a deep moderation and logging engine.
**Security Bot** publishes the most transparent version of this: age, join speed and avatar
signals combine into a published 0–100 "normal join" score, free, while its anti-nuke and
anti-raid sit alongside it.

## Where Vetox's Join Guard fits

Identity linking and captcha gating are jobs the products above are built for, and this comparison
names them rather than stretching Vetox to cover ground that is not where its capability lies.
What Vetox does provide, as part of Anti-Raid at Basic ($4.99/month), is signal-based
join screening with real expressive depth: **up to 10 named conditions, each combining up to 5
rules with AND/OR logic**, drawing on account age, avatar, banner and username shape. Paired with
it, and free on Starter, **Protection**'s 20 rule types cover what happens after a join —
permission abuse, mass actions, webhook and emoji abuse — and **Dashboard Watcher** records who
changed any of it, free, 500 entries over 90 days, across every system rather than one. For a
server that wants join screening sitting inside the same dashboard as the rest of its moderation
stack, that is the honest case; for identity linking or a captcha specifically, the products
above are the ones built for that job.

## Which one to install

| If your problem is                                          | Install                                     |
| ----------------------------------------------------------- | ------------------------------------------- |
| Linking a joining account to a known alt or ban             | **Double Counter**                          |
| An accessible, cheap human-proof gate with a config audit   | **Captcha.bot**                             |
| A verification flow with nothing for a scammer to imitate   | **Vulcan** (Web3-scoped)                    |
| Join screening bundled inside a broader security suite      | **Wick**, **Sapphire**, or **Security Bot** |
| Join screening bundled inside a broader moderation platform | **Vetox** — Basic, $4.99/month              |

## Frequently asked questions

**What's the difference between a captcha bot and an alt-detection bot?**
A captcha proves a human is present and does not claim to know who they are. An alt-detection bot
like Double Counter links a joining account to other accounts — its own or another server's bans
— using a cross-server signal database. They solve different problems and a server can need both.

**Is there a free Discord verification bot?**
Yes, in most of the shapes above. Double Counter's identity linking is free for most communities;
Captcha.bot's captcha and anti-phishing are free at a lower tier of headroom; Sapphire, Wick and
Security Bot all give away signal-based join screening free.

**Can a verification bot be tricked?**
Every method has a failure mode. A determined attacker with a human solver defeats a captcha; a
brand-new alt with no prior signal footprint can pass an identity check; a signal-based screen can
be tuned too loose or too tight. Layering a screen with a captcha closes more gaps than either
alone.

**Do verification bots record who changes their own settings?**
Rarely. Of the products examined across this research's moderation and security domain, only
Captcha.bot and the invite-only Zeppelin record configuration changes at all — worth checking
directly if an insider changing the protection is part of a server's threat model.

**Should a Web3 server use a general verification bot or one built for token gating?**
A token-gated community's real risk is phishing during wallet verification, which is a different
problem from proving a human is present. Vulcan's design — never asking for a signature or a
wallet connection — is built specifically for that risk and is worth the narrower scope for a
server holding real token value.

## Method

Every capability, gate and price above was read from the vendor's own site or documentation on 31
August 2026. Absence claims are scoped to the seven products examined here.