Security at BotWave

Your WhatsApp session runs from your own device via QR code. You are not sharing a server IP with hundreds of other bot users. This is the single biggest factor in avoiding bans because WhatsApp flags accounts that share IPs with known automation traffic.

New sessions start with 15 messages per day and scale to 200 over 7 days. The bot adds random delays (1-5s per message), sends typing indicators, reads messages before replying, and occasionally ignores messages entirely. 50-100 response variations per command ensure no two messages are identical.

Detects spam floods (5+ messages in 10 seconds triggers a warning), rate limits per-session (10 msgs/min) and per-user (20 msgs/min), and uses an LRU buffer to never send the exact same message twice. Hard cap of 200 messages per day per session.

Between 12am and 6am, the bot responds slower and shorter, mimicking real sleep patterns. 15% of group messages are read but not responded to. 5% of the time, the bot takes a 15-30 second "distracted" pause before replying.

Random bytes are appended to stickers and images so each file has a unique hash. Zero-width characters and punctuation variations ensure every text message has a unique byte fingerprint. WhatsApp cannot pattern-match these as bot-generated.