How to Spot Sneaker Bot and Cook Group Scams

Most scams in the bot and cook group world follow a few familiar patterns: someone pretending to be a seller, a private deal with no protection, or a promise that sounds too good to be true. This guide covers the scams resellers run into most, the red flags that give them away, and how to pay for and verify a bot or group safely.

Why this market attracts scams#

A few things make bots, keys and cook groups an easy target:

• Most deals happen in Discord. Sellers, buyers, support and marketplaces all live in DMs and servers, where anyone can copy a name and avatar.
• The products are digital. A key, a download link or a server invite can be faked, shared or taken back, and nothing arrives in the mail to prove a sale.
• Demand outruns supply. Popular bots sell out or open only in waves, so people look for keys secondhand, often in a hurry.
• Payments are hard to reverse. Private sellers often ask for payment methods that, as the FTC puts it, are like sending cash.
• There's real money at stake. Licenses can cost hundreds or thousands of dollars upfront, and cook groups often charge monthly.

None of this means the market is mostly scams. The risk sits mainly in private deals, DMs and offers that skip the normal way of buying.

The scams resellers run into most#

Fake sellers and lookalike accounts#

The most common trick is pretending to be someone you trust. That can be a copy of a bot's or group's website, a social account with a near-identical handle, or a Discord user using the same name and avatar as real staff. Discord warns that impersonators include hacked accounts posing as moderators and copies of well-known bots.

Lookalike handles are easy to miss. Cybersole's website, for example, links its official X and Instagram accounts as @cybersole, and Zephyr Monitors' site links @ZephyrMonitors. A handle that's one letter or one underscore off isn't the seller, however real it looks.

The fix is simple: start from the seller's official website, and only use the buy link, Discord invite and social accounts it links to.

Fake staff and fake middlemen in your DMs#

Real support usually runs through official channels: Refract and Valor, for example, handle support through Discord tickets, not unsolicited DMs. Scammers message people who've just asked a question in public channels, posing as staff ("I can fix your key, just send me your login") or as a well-known middleman offering to hold the money in a trade. A middleman is only as trustworthy as their identity, so check it through the server itself, not through the person who messaged you.

Secondhand key and rental scams#

Because many bots are sold out or invite-only, private key sales and rentals are common, and they're where buyers have the least protection. Rentals are usually arranged privately and rest on the owner's reputation alone, with no marketplace behind them.

Things that go wrong:

• The key isn't transferable. Valor's terms forbid renting or transferring access, Cybersole needs its written consent, and Stellar separates transferable and non-transferable licenses. A sale the developer doesn't allow can end with the license deactivated.
• The seller keeps control. In a private deal, the seller can reset the key, reclaim the account or stop renewing it after you've paid.
• "Lifetime" turns out to be something else. A key sold as permanent may be a rental or due to expire.

Our guide to licenses, renewals and rentals explains how transfers work for each bot. If a transfer is allowed, do it through the developer's own dashboard or process, never just by receiving a key in a DM.

Cracked bots and unofficial downloads#

Free or "cracked" copies of paid bots, and downloads sent by strangers, are a classic way to spread malware or steal accounts. Discord advises never running programs or code you don't recognize. Legitimate bots deliver downloads through their own channels: Refract's docs say you download the app from its web dashboard, and Valor sends a personal download link through its own Discord auth bot. Get the software only from the source the developer names.

Phishing and account takeover#

Many scams aim to take over your Discord account, which can then be used to scam your contacts or servers. Discord warns about lookalike links, link shorteners that hide where you're going, QR codes from people you can't verify, and anyone asking for your password or authorization token. A stolen Discord account can also mean a lost bot key, if the key is tied to it.

Fake group buys and discount codes#

A group buy is a discount a community arranges for members. Real group buys are common, and bot developers often use cook groups' group buy channels to restock licenses or find beta testers for new bots. That's exactly why fake ones work. Scammers copy the idea: a DM or fake announcement offers a cheap bot or proxy deal, payable by payment app or crypto, through a link that isn't the seller's. Check any deal against the group's own announcements channel and the seller's official site.

Groups that overpromise#

Not every bad experience is outright fraud. Some groups sell on promises they can't keep. The FTC's guidance on paid business and coaching offers lists warning signs that fit reselling groups well: guaranteed income, pressure to join now, success stories that may not be true or typical, and upsells straight after you pay. No group controls stock or resale prices, so a promised profit is a red flag. Our guide to cook groups covers what a legitimate group usually provides.

ACO and slot services#

With ACO (auto-checkout) or slot services, someone else runs bots and checks out on your behalf. Stellar's glossary describes a slot as a service where someone runs a bot for you and charges after a successful checkout. You hand over your shipping profile and card details, so you're trusting the operator with sensitive information. Our guide to ACO services covers what to check first.

A quick check by product#

Red flags checklist#

Walk away, or slow down and verify, if you see any of these:

• Guaranteed profits or checkouts. No bot or group can promise them.
• Pressure to pay now. Countdown timers, "last spot" messages, a deal that expires in minutes.
• Payment by gift card, crypto, wire or a payment app, especially Friends and Family. The FTC says honest sellers won't insist on these.
• An unsolicited DM offering support, a deal or a middleman.
• A link, handle or invite that isn't the one on the seller's official site.
• No terms, refund policy or clear pricing published anywhere.
• Proof that's only screenshots of checkouts or profits.
• Requests for your password, 2FA codes, authorization token or a QR-code login.
• A download from anywhere other than the developer's own dashboard or channel.

How to pay safely#

How you pay decides whether you can get your money back if something goes wrong.

• Use the official checkout. A bot's own site, or its Whop page linked from that site, is the safest route. On Whop you can request a refund from your billing history, but Whop says refunds aren't guaranteed: the seller and Whop review each request. See our guide to buying on Whop.
• Avoid payments that work like cash. The FTC warns that money sent through a payment app is very hard to get back. Gift cards, crypto and wire transfers are the same.
• Don't use Friends and Family for a purchase. PayPal separates Friends and Family payments from purchases, and its Purchase Protection covers eligible purchases, not personal transfers.
• Read the refund terms first. Most bots say all sales are final, so a payment method with protection matters even more. Our guide to refund policies shows what bots and groups actually allow.

How to verify a seller#

Before you pay a bot, group, proxy provider or private seller:

1. Find the official website, and use it as the starting point for every link.
2. Match the socials. The X, Instagram and Discord accounts should be the ones the website links to.
3. Check the buy link. It should go to the seller's own checkout or the Whop page the site links to.
4. Read the terms and refund policy. A real business publishes them.
5. Check how you'll get the product. A key in a dashboard or a server role you claim is normal; a key pasted in a DM after a payment app transfer isn't.
6. Look it up on OOSClub. Each listing links the seller's official site and accounts we found, with the date we checked. Our guide to reading an OOSClub listing explains each field.

Account sellers carry similar risks; see our guide to buying retail accounts.

If you've been scammed#

1. Stop paying and stop sharing details. Don't send more money to "unlock" a refund.
2. Secure your accounts. Change passwords you shared, turn on two-factor authentication, and log out other sessions. Contact the bot's real support if your key or account is involved.
3. Report the account on the platform where it happened: Discord, X, Whop or the marketplace.
4. Contact your card issuer or payment provider. A chargeback or dispute is meant for charges you didn't authorize or for things that weren't delivered.
5. Report it officially. In the US, report scams to the FTC at ReportFraud.ftc.gov. Elsewhere, use your country's consumer or fraud reporting service.

This guide isn't legal advice. To browse sellers by category, start from the bots hub.