Reviewing Flags

Reviewing Flags

A flag means "this looks like abuse; a human should look." EconGuard never auto-punishes — the decision is always yours.

The workflow

1. A flag fires. You see it in console, in chat (with econguard.alerts), or in Discord. Staff also see the pending count on join.
2. List it. /eg flags shows each flagged account with its flag type and reason.
3. Investigate. /eg history <player> shows that player's full money history across every source — bank, auctions, shop, pay — newest first. This is where you see the chain, not just the one event that tripped the signal.
4. Decide. Warn, ban + rollback, or clear the flag as a false positive.
5. Clear. /eg flags clear <player> once you've dealt with one, or /eg flags clear to reset all.

Reading a history

/eg history <player> [limit] (limit 1–50, default 10) lists entries with:

• source — bank, auction, shop, pay, etc.
• action — e.g. deposit, sale, withdraw
• amount and direction — incoming to the player, or outgoing
• counterparty — the other party, where one was recorded

The RMT chain to look for: value arrives (an auction "sale" of a worthless item, or a large pay) and then moves or leaves (banked, then withdrawn over days). One source alone looks innocent; the sequence across sources is the tell.

Confirming with the counterparty signal

If a counterparty-correlation flag fired, both the payer and receiver are flagged. Run /eg history on both. A genuine ring shows the same pair moving large sums repeatedly through different channels; a one-off legitimate trade won't.

False positives

Flags are heuristics, not verdicts. Legitimate triggers happen — a returning veteran who cashes out a hoard, a staff payout, an event prize. If the history looks clean, clear the flag and, if it keeps recurring for legitimate reasons, raise the relevant threshold in config so the net matches your economy.

Enforcement is out of scope

EconGuard gives you the evidence — the ledger and the flags. It doesn't ban, jail, or roll back; use your moderation and economy tools for that. Keeping detection and enforcement separate is intentional: the ledger stays a clean audit trail you can trust, and punishment stays a deliberate human action.