I botted Diablo 3 heavily, and it made me almost $500 in a very short amount of time.
I only ran 1 bot for personal reasons (I hated the levelling grind, and at the time D3 had absolutely
no end-game content to keep people interested), so I decided 'what the hell', I'll just bot my character until the game gets updated with more content. Needless to say, that if I looked at it like a business (most people who used the same bot I did treated it as a business), I could have scaled up and made thousands.
From what I know, the best time to bot a game, absolute best, is right when a game releases. In the few months after D3 release last summer, I made decent money on the RMAH. I even sold an amulet for $128, not realizing that it would have sold for the cap of $250 instantly if I did my research correctly - the amulet was actually extremely good for a certain style of gold botters, and so it sold within 4 minutes
Anyways, right after an online PC game's release there is a golden window of opportunity that does not often present itself again: The devs are waaaay too busy patching and updating their servers
and their software, that dealing with botters is on the backburner (simple reason: they don't really lose or make money off botters so they ignore it while they solve major issues). This was true of WoW (which my friend still bots heavily, 8 characters at a time), SWTOR, and D3. Also, any bot program is almost always ready when the game releases, day 1. Many of the bot programs are in development before the MMORPG is even in beta.
I could have easily treated it as a business and made 5 grand in those months instead of $500. I really should have. Life lessons.
Botting The Next Big Game?
A good game to check out, (and exploit with botting), that is similar to D3 is called Path of Exile. Instead of being developed by a huge company such as Blizzard, that can more quickly deal with server/software maintenance/eventually botting, it is being developed by an small Indie company from New Zealand. The game is currently in beta, slotted to be released this fall. The company managed to raise in excess of 2 million USD to fund the project, a sign that the Path of Exile community has a very strong underground following.
I played the game through (I have a level 70 Duelist, and 3 other characters, it's pretty fun) and I can tell you this: people are making quite a bit of money botting this game (I would estimate a total market size of up to 50k, even possibly 100k right now for items/gold), even though it's months from release. I do other things for $$$ now, so I am not interested in botting as a business venture, which is why I don't get into botting PoE.
There are tons of other fun cracks for Path of Exile that the Devs will pretty much never be able to fix, that is the manipulation of the client side data (which is usually around 90% of all the data of the game running to keep bandwidth low. Remember, bandwidth on such a massive scale starts costing a lot of $$$). Practically all the data about a map is client side
except where your character's location is. So people have developed quick cracks that unlock the data. An example of this would be a Zoom hack, where you can "zoom out" of the map, much farther than the developers intended, to see the entire map, entrances, exits, treasure chests etc. My point is, client side hacks are
rampant in Path of Exile, so this is a direct indicator that the Devs either
can't or
won't patch it. Meaning botting and not getting caught is that much easier with the game right now.
Botting and IM are similar things!
Back on topic, Botting as a business is very similar to IM, and it definitely gave me a good perspective to start IM with at least.
With IM, we try to trick Google to get a reward for it. They will eventually catch on to the methods we use (everything in life does, even a damn virus adapts to its surroundings), and that's fine. We simply switch up the methods, and attempt to scale again. You
regenerate the parts of your businesses that were negatively affected (disavow links, change domain etc, purchase new characters that were banned), and
change your method (don't blast 50,000 links to your homepage anymore, use harder to detect tactics when gold farming) after they catch on. Instead of SERP manipulation = $$$, it's software manipulation = $$$. Remember that with any botting business, avoiding detection is key. You need things like proxies, and multiple machines running multiple copies of the game to make a botting business.
The less they (Google/Game Devs) detect your bullshit, the more you get away with aka you laugh your way to the bank more.
So how do you avoid detection by automated systems? The answer to that question can be found in something as simple as a captcha. Random, strange, and bizzare patterns have always stumped automated detection systems, and will probably continue to stump them for millions of years to come.
The trick with botting is to stay 1 step ahead of their detection algorithm, just like with Google. I was eventually caught on one of my D3 characters by a new algo update that Blizzard introduced, Waypoint indexing. They would check to see the Waypoints I use the most, and look for patterns. The bot I was using didn't mix up Waypoint usage at all (they do now), so it got my Paragon 80 Barbarian banned.
For anyone that plays D3, you can begin screaming now :damnit1:
In a strange fashion, this is all kind of like spintax articles keeping everything mixed up, you know, trying to leave a unique and different footprint at every opportunity. Switching words, sentence structure, and articles helps trick Google in the same way that mixing up where your characters go to farm, who they sell items to in town, and what order they use things like Waypoints can trick Game Developers.
Just like with IM, there are short term and long term business models. Let's take D3 for example: Gold farming methods, which can be very lucrative, is by far the
easiest to detect and thus the least safe, but the volatile state of the early market often made this worth it. The decline in what you can make per million gold on the RMAH made this method much less attractive as time went on. People got accounts banned left and right, but that didn't matter: this method is short term. If an account was banned, you simply bought another one. That's what short term is about. Make explosive ROI, let others ask questions after the dust settles.
Item farming methods (this is what i did mainly) were
entirely dependent upon you finding an awesome or rare item and selling it, so it has a very random aspect to it. The drop rate of good items is random, and not in a good way. Random in a 1/1,000,000,000 sort of way. Similar to driving traffic to a website: a very low amount of that traffic will actually convert, the percentage chance that any given visitor on a website will translate into $$$ for you is usually quite low.
But if you did this for long enough, or with a large quantity of websites, then patterns emerge out of the random numbers (if you run 12 bots, then you will start to see 2 good items per day avg), and you have the beginnings of a stable business that is LONG TERM! Item farming was much more stable, harder to detect, but more difficult to execute and took a good bit of setup.
For example, my Barbarian who item farmed had to have awesome gear to battle huge packs of tough enemies in hopes they dropped a good item, wheras
A gold bot was more like a speedy Demon Hunter in gear that gave extra Gold Find, tumbling around breaking pots at the speed of light, and looting the gold piles from 40 yards away because of gear that granted bonus pickup radius. Maybe now you can realize why gold farming is so easy to detect, even your gear had abnormal stats that screamed "SPAMMMMMY", where my Barbarian had gear that was very typical of what actual players were using.
So Blizzard has methods to detect patterns in your gear, your build, your location, your gold per hour etc etc etc. As you can see this list would continue on for a very long time. That's why Item Farming is 1000x less detectable: my gear/build and farm locations all would mimic what actual players were attempting to do, which was to farm up awesome items! I.E. item farming looks much more organic to what real players do.
That's a huge part of any botting method, is appearing as part of "the norm". The larger the crowd, the easier it is to blend into it to avoid detection. Farm places that are very common for other players to farm, wear gear that isn't completely obviously bullshit (trust me, part of the Blizzard kept Gold Find to simply monitor the simpler bots who would stack that stat)
TLDR: Appear natural, try to blend in with the norm with gear/builds/items etc. Timers need to be set to take regular breaks (nobody can play 48h straight lol, I'm shocked people thought they could get away with this), also random scheduling of bot runs became very important.
Very important information to remember with Game Dev companies:
1. Bot detection is pretty low on the priority list from a business standpoint of a game developing company, as it does not necessarily influence more money going into their bank accounts. They spend less $$$ on algo detection than you might think. D3 makes Blizzard millions, and I promise that less than a fraction of a percentage is spent on a team of Devs to play pretend hello kitty janitor and clean up a problem that someone like a CEO would think is pretty pointless in the first place.
Botting regulation is NOT well budgeted. Thus, it is very easy for even simple tactics to stay ahead of detection. Tactics, like, randomizing your Waypoint usage as you farm.
2. There are
many complications that companies who attempt to regulate botting run into. Does anyone remember Rift? They thought they outsmarted botters everwhere, in a way that Blizzard didn't dare dream of. They did many quick updates that made it extremely easy to detect bots with, and in a very short amount of time they banned every account that they found was botting. Then, reality hit them like a ton of bricks:
they just got done banning nearly 50% of their live subscriptions. So while Rift was busy looking at botting as a parasite, Blizzard wisely views it as a more symbiotic relationship.
Because of this, and a few other reasons, Rift never recovered. They were already on a decline in population (very common for a MMORPG that isn't WoW), and then they commit business suicide by banning loyal customers, who just didn't want to really put up with a grind so they botted.
3.
They legally cannot watch what programs you are running on your machine. There have been multiple class action lawsuits about this (some being with WoW), and the end result is: Blizzard no longer directly monitors your machine, only the information that your machine sends to their servers. This can technically include things like Mac address, the game client id #, your IP etc. They use this spread of information that they retrieve from your machine to attempt to find out botters.
Even though their TOS said it was ok for them to run programs like Warden (Vanilla WoW, anyone?) that monitored your machine, it doesn't matter: there was just too much legal resistance involved to keep Warden going. Think about it, can you sign a contract that says if you don't do something, then the company can come kill you? Sure, sign away, doesn't mean the contract would hold up in a court.
So what did Blizzard do with their Warden spyware program? They did what any company would do with something that they honestly don't care much about, and something that is a litigation nightmare: they ditched it.
TLDR: Bot regulation is not much of a priority for companies, can get complicated fast, and is drastically limited in depth of information, and can get very very expensive, and is legally technical.
My 2 Cents
Blizzard, in my opinion, knows completely and 100% of their botting situation with D3 and WoW(not necessarily
who is botting though, of course), and have learned from Rift's mistakes. They are quite careful with their banwaves, at least the ones I have personally seen. If you guys do want to create a bot business, I would make it a point to pride myself on surviving each and every banwave. GLUE yourself to the forum of whatever bot you are using. You will need to eat sleep and breathe every post, because this is what it takes to know when banwaves happen, and for what reason.
With D3 banwaves, Blizzard's version of Matt Cutts didn't come out and tell us all exactly how they learned (their method) how to catch botters, that would be revealing their algo so in depth that my sister could understand how to beat it. Instead, they reveal close to nothing, so you need to talk to
every member of the forum, so that you can to understand what they were doing, and why they got caught, what was banned etc. The more you know, the more you avoid detection, the more you $$$.
Please don't trick yourself, and pretend you can make a bot business without knowing every little clue about your enemies' methods, the game you are botting in, and the market of what you are trying to manipulate (gold, rare items). The less time you spend learning and plotting methods to beat detection (which was fun for me), the more time and money you waste regenerating parts of the business.
I got pretty far with botting D3, and only 1 character was banned due to my utter negligence of the enemy methods. It's really that simple, my fault that I didn't know what I should have known.
TBH I have an unhealthy love for video games, botting, and I could go on and on about what I have experienced, but I'll stop here.
TLDR:
If you are going to bot PC games, get in quickly and hit it hard. Right at launch, hit the ground running with your operations - treat it like a business. Early in a game's lifespan, the Devs are too busy with other shit than to care about botters, and the market is so outrageously tilted in your favor as a first-to-market seller of a rare item, etc.
Maybe I can write an eBook on the D3 bot subject, as per your suggestion :smokin: