Moderation settings

One switch at the top of the Rules card turns the rules in this article on or off for the whole group. While it is off, none of them delete or mute anyone; the rules below grey out to show they are inactive, but keep their values — switching moderation back on restores your exact configuration. Four features deliberately keep their own separate switches and are not covered by it: raid protection, quiet hours, watched keywords, and member warnings (/warn). Each stays exactly as you set it, so switching moderation off never quietly disables your raid lockdown or your overnight schedule. Filter lists stay editable either way, so you can prepare allow and block lists before enabling.

Domains that your group trusts, such as official project links. Allowed domains do not override blocked promo terms inside the URL path.

Official channels, bots, or partner usernames that members may mention. Limzo also protects its own usernames automatically.

When Limzo is added, links and @usernames already in the group’s own description are treated as the group’s official ones and pre-added to the allowed lists, so moderation never fights your own links. This only ever adds entries — it never removes anything you saved, and you can edit the lists any time.

People who should be exempt from moderation, for example team members or regular contributors. Free has a smaller trusted-user limit than paid plans.

These terms are checked in links, usernames, buttons, and Telegram promo targets rather than normal everyday text.

Optional protection that blocks spam links and usernames already confirmed by admins in several other Limzo groups. Your allowed domains, allowed usernames, and trusted users always override it. On by default; switch it off in the Moderate tab.

Links that pass the other rules are checked against a continuously updated database of known phishing and malware sites — the same kind of protection browsers use. When a link is flagged, Limzo replies to it with a public warning so nobody taps it: nothing is deleted and nobody is punished, which makes a rare false alarm harmless. Warnings for the same site are limited to one per day. Pro and Community groups can switch on auto-delete for flagged links instead. Only the link itself is ever checked — never the message, the sender, or your group.

Catches spam that has no bad words in it: the same message pasted several times, or a rapid burst of messages from one member. The copies are removed and the sender gets a short cool-down (a brief mute, never a ban). Admins and trusted users are exempt, and it only cools someone down if your group already acts on offenders. On by default; switch it off in the Moderate tab.

Optional: when the same member triggers three confident spam detections within 24 hours, the action escalates from mute to ban. Low-confidence removals, such as shared contact details, never count toward escalation. On by default.

A shared strike counter for offenses only a human can judge. Any admin can reply to a message with /warn (or use /warn @username, with an optional reason) — the member gets a public warning with a visible count, and every warning carries a one-tap undo button for admins. At the limit you choose (default 3) Limzo automatically mutes, kicks, or bans — your pick — and the counter resets. /warns shows a member’s count, /unwarn removes the latest warning, /resetwarns clears them all. Admins can never be warned, and old warnings expire together with your moderation history.

Admins can act directly in the chat: reply to a member’s message (or use @username) with /ban, /mute, /kick, /unban, or /unmute. Add a duration like 30m, 2h, or 1d to /mute or /ban for a temporary action; without one, /mute uses the group’s configured mute length and /ban is permanent. /kick removes the member but lets them rejoin. The commands stay silent for regular members, admins can never be targeted, and every action lands in the Mini App’s recent-actions log with one-tap reversal.

Members can flag a problem without pinging anyone: replying to a message with /report privately notifies the most recently active connected admins, with the message preview and one-tap Delete / Mute / Ban buttons. The command and its short confirmation tidy themselves away, and built-in rate limits mean it can’t be used to flood the chat or the admins. Works on every plan; switch it off in Settings → Public commands.

Optional and off by default: pick the language your group runs in (with an extra “also allow English” switch), and messages confidently written in a different language are removed and receive a regular warning — enforcement rides the same fair warn ladder as everything else, never an instant kick. Detection is deliberately cautious: short messages, names, emoji, links, mixed text, and romanized chat all stay untouched, and admins and trusted users are exempt.

One setting for everything members bring in from outside the group. Smart, the default, removes non-official story shares — the format spammers lean on hardest. Also block channel forwards adds every message forwarded from a channel, the way channel ads travel between groups. Block every forward adds forwards from people too. A removal is delete-only and never counts toward repeat-offender escalation. The one exception is deliberate repetition: if the same member keeps bringing in the same kind of outside content over and over, Limzo stops reading it as an accident and your group’s usual offender action can apply. Admins, trusted users, allowed usernames, your own channel, and posts your own members made in the group are always exempt, so official announcements and in-group re-shares keep flowing. Set it in the Moderate tab under “Forwards & story shares”. Full guide: blocking forwarded messages.

Optional join check, off by default: new members are muted the moment they join and get one message with an “I’m human” button. Tapping it unmutes them instantly; anyone who doesn’t verify within a few minutes is removed and can simply rejoin to retry. Messages that slip in before the mute lands are removed automatically, admins are exempt, and simultaneous joins share a single check message — so the chat stays tidy even during join floods. In a channel’s discussion group the check works exactly the same for anyone who joins; people who only comment on the channel’s posts never join the group at all, so the check never applies to them and their comments stay covered by the moderation rules above.

Watches for members who join with — or rename themselves to — a name or username that mimics one of your admins or Limzo itself. Connected admins get a private alert with one-tap Ban / Looks-fine buttons; choosing “Looks fine” whitelists that member permanently. On by default. Pro and Community groups can additionally set an automatic action (mute for 24 hours or ban) that fires only on clear impersonations, never on uncertain ones. For how the scam itself works and what else protects members, read the fake admin scam guide.

Telegram lets anyone edit their own messages for 48 hours — long enough to post a harmless photo, wait until admins have scrolled past, then swap the file for content designed to get your group reported. When a member’s edit replaces the photo or file in an earlier message, connected admins get a private alert with a link to the message and one-tap Delete / Looks-fine buttons. The alert is silent: nothing is posted in the group and the member is not notified. The same alert fires when an edit slips a file into a message that was text-only. Caption-only and text-only edits never trigger it. On by default on every plan, with a per-group switch under Moderate → Rules.

When Limzo bans or mutes a spammer, it quietly checks who brought that member in (from your Top recruiters data). If one member keeps adding people who all turn out to be spam — a deliberate spam funnel — connected admins get a single private heads-up naming that recruiter, with one-tap Ban, Mute, or “Trust this recruiter” buttons. Limzo never punishes the recruiter on its own — the decision is always yours, and choosing “Trust” stops future alerts about them. Only deliberate adds and named invite links count, so members who joined on their own never implicate anyone, and current admins are never flagged. Runs on all plans; these alerts follow the same switch as your other moderation alerts.

Pro and Community groups can close for the night on a daily schedule: between the hours you pick — in the group’s own timezone from Settings — the group goes read-only, and when it reopens your exact permission setup is restored, including any native media restrictions you had. Admins can post throughout, and an optional note can tell members when the group reopens. That note looks after itself: when the group comes back it becomes a short “we’re open again” message, and a little later it disappears, so your chat is never left with a stale notice from three weeks ago. The schedule is re-checked every few minutes, so changes apply quickly; if Limzo ever loses the permission it needs to reopen the group, connected admins are alerted immediately and Limzo keeps retrying.

Big groups move faster than any admin can read. Watch up to 10 words or short phrases — a product name, a topic, a recurring scam pitch — and Limzo quietly collects every mention. Admins who opt in receive at most one private digest per hour: mention counts per keyword plus a few example messages with direct links. Nothing is posted in the group, members never see it, and when nothing matched, no digest is sent.

Off by default. A raid is accounts arriving together, faster than any admin can react — and Limzo watches the shape of your join traffic rather than any single member. When a wave hits, the group goes read-only, the accounts that arrived in it are held back, and connected admins get a DM with a one-tap “reopen now” button. The group reopens on its own shortly after, the notice left in the chat turns into an all-clear and then clears itself, and admins are never affected. Free on every plan; Pro and Community can tune how sensitive it is, how long the group stays closed, and what happens to the wave — nothing, a mute, a kick, or a ban. Closing the group needs the Ban Users permission, and quiet hours and a raid can hold the group at the same time without either one reopening it early.