🍯 Honeypot

Scam spam (fake giveaways, free Nitro, crypto links) is usually posted by bots and hacked accounts that blast the same message into every channel they can see. They don't read channel names. A honeypot is a channel nobody real posts in: whoever does is almost certainly one of them.

Set it up

Create a text channel and name it so people know to stay out, for example #do-not-post-here. Put a warning in its topic too.
Keep it visible to everyone: bots only fall for channels they can see.
Go to AutoMod → Honeypot in your server's settings, pick that channel, choose what happens, and turn on Honeypot.

Whoever posts there has their message deleted right away and is:

Banned, with their last hour of messages deleted (the rest of the spam burst), or
Softbanned: banned and unbanned at once. Same cleanup, but a real member whose account was hacked can rejoin once they've secured it.

Vaqun DMs them first, explaining why, in case it's a hacked account rather than a bot.

Who's never touched

The server owner.
Staff: anyone whose roles give Administrator, Manage Server, Manage Channels, Manage Messages, Ban Members, Kick Members or Timeout Members, so you can check on the channel safely. Their messages are left alone too.
The roles you add under Never touch these roles.
Bots and webhooks (including Vaqun).

Good to know

Vaqun needs Ban Members to ban, and Manage Messages to delete the message instantly (otherwise it goes with the ban). It can't ban anyone whose highest role is above its own.
Every catch is in the Activity tab: who, ban or softban, which channel and what they posted. The ban and the deleted message also show up in your server logs, credited to the honeypot.
/nuke on the honeypot channel keeps it the honeypot.