suri

Blog name patterns

You might have noticed how default blog urls here have four random words stuck together, and early bots used a similar pattern. But it has evolved. I recall seeing names that were two or three random words and a two digit number, typically from 20 to 50, presumably meant to be seen as a person's age. Like these:

Then a different pattern was used, like two or three words then a hyphen then a number. Then another, like a first name mixed in with random words, etc. Now, it's harder to see a pattern, so some bot names now look more (or less) random... more like real blogs. If you see a new follower with a random name, it doesn't mean much, but if you see more and more followers with names that seem to fit a pattern (and it's not simply the tumblr default username pattern), then chances are, they are bots created with the same or a similar program. Here's an example of getting new followers where the names seem too random to be real but you don't really notice until you get a bunch in a row, and the randomness is itself a pattern:

Profile pics that real tumblrs wouldn't choose

Often they used to have closeups of female faces. Now they still tend to have pictures of women, but not so zoomed in, and some even feature two women. Like here:

Notice that three of the above examples follow a naming pattern of what could be actual people names and a number. The fourth is like that, too, but with a hyphen tossed in.

And bots sometimes have default profile pics that may or may not be changed later, so watch out for default pfp's that later get replaced with pics of random women. Usually young and somewhat attractive. Most of the bots are geared towards attracting hetero men, hence the female pfp's of generally attractive women. The hope is we see one of these pics and think that's actually what the blogger looks like.

Truth is, Tumblrs rarely choose pfp's like that. This isn't the kind of social media platform where we typically show our faces (unless it's a personal fashion or cosplay blog, and then we are probably wearing makeup and costumes). We choose pics of plants and animals, fictional characters, historical figures, celebrities, artwork, etc. It's unusual for us to market ourselves based on personal appearance. So, when you see a blog with a pfp that looks like it's from Instagram or LinkedIn... or from a dating profile... it's probably fake. They are just random pics found online and essentially stolen from whoever originally uploaded them.

Default header images or more random women

Usually, bots have blank or default blog header images (see the examples above). I used to see a lot of bot blogs where the pic used for the header is the same as the pfp; those usually have descriptions where it's just a name and a suggestive emoji or a name and a plug for dirty pictures. Like:

More recently, they've started using images that show women who match or at least look like the women in their pfp's, but they aren't the same photos. Just like those pfp's, the header images are likely stolen from profiles elsewhere or random pics online. The ones that have header images that "work" with the pfp's also have a tendency to include links in their blog descriptions.

Sus blog descriptions or none at all

Most bot blogs lack blog descriptions entirely or just have a name or something about photos, like those examples above. But lately I've been seeing ones where there's a short description. In those cases, it's usually a link to who knows where, and it's best not to even find out. The text, whether there's a link or not, is usually an age (assume that's fake), something about the person's identity or preferences (often of a sexual nature), sometimes a reference to ranking on OnlyFans (it wants you to think any link there might take you to that sort of content), and a collection of oddly chosen emojis mixed into it.

Zero posts or sus posts and reblogs

A lot of legit blogs are created for the sole purpose of following content they want... and maybe asking questions, usually as anons. Those "don't follow me, I'm just lurking" type blogs rarely post or even reblog anything. Most bots also take this approach.

But some reblog sexually suggestive posts and some reblog more explicit content -- even links advertised as naughty games -- but the most realistic looking ones reblog a mix of sexual and innocuous, even innocent-looking content. As you scroll down through images of puppies, mysteriously inviting landscapes, and teacups next to open books... you eventually find images and even sometimes gifs of very mature content. Often with suggestive emojis and links that should be avoided at all costs. Some even just make one or two posts with links and leave the blogs untouched for years. Like this one:

This blog only has one post, and it's from 2019. Claims about some free training program that'll earn you large incomes. Notice the tags on it are kind of generic, and some don't fit, like #home #decor #gardening. But it's a link to... something.

They might try to chat, but what they say is sus

It's very rare, in my experience, but I will occasionally get a dm from a random blog that just doesn't sit right.

Sure, sometimes a new follower will contact me to let me know they found my blog and enjoy it. Even longtime, mostly silent readers/followers will occasionally decide to reach out and privately tell me they were a particular anon in an ask... or simply that they finally found the nerve to say hi. That's all fine and dandy.

But when a new follower (who doesn't seem to share interests with you or has interests that don't match your blog topic) or a random content blog that doesn't even follow you just dms with "hi" or "how are you?", I get very suspicious it's just a bot. Their blog might look default or not but lacks content. It might be full of content that simply has nothing to do with your content. And they send a random starter message, completely open to your response. You can test them by asking if they are a bot. If they ignore that and respond with something like "I'm lonely" or "what are you doing tonight?", they are definitely a bot. If they say "no I'm not a bot" (or something like that) then ask leading questions like the "what are you doing" one, they might not be a bot, but they are likely just phishing/scamming.

One of the best tests is to ask them what they think about your own blog posts. If they ignore that and act like they might be following a script? Bot. If they say something very generic, like "I like it a lot" but immediately change the subject back to personal questions or something phishy (might also be a bit scripted)? Scammer. Either way, best to report the chat as spam, which will also remove the conversation from your view.

It's often not one thing but a combination

If you get followed by a blog that looks completely default, the best thing to do is maybe dm them to ask if it's a real person/legit blog. If they don't respond within a decent timeframe, they might just be too shy, but chances are they are a bot. If they respond with something that feels too general or scripted, probably either a bot or a scammer -- some are sleepers that wait for you to contact them. But a blog just being default doesn't mean it's bad; it could be a shy lurker or it could be someone new to tumblr who hasn't chosen pics, themes, etc. yet.

However, if you see a follower pop up (either new or their blog has changed since they started following), and the blog has some combo of the traits mentioned above, chances are super high it's a bot.

What bots do

I'm not entirely certain about all the different things they can do, and some of the things are likely more harmful than others.

I've gleaned a few ideas from posts I've read about the bots, though, including a good one I saw that had been reblogged by Neil Gaiman. I reblogged it from him, though I might have moved it to @aby-off-topic.

My understanding is that the same creator (person or program) makes a whole bunch of them. And there are probably many different individual creators, each making large groupings of them. Some of the bot blogs have content, usually of a sexual nature but occasionally not, like cryptocurrency or some random-sounding business venture. Those will have links to other sites, though some might actually link to other, related blogs in the same grouping. The content blogs also tend to be full of various tags, typically reusing key tags copied from the posts they reblog. If they have "original" posts, those will probably have the same key tags. The grouped content blogs boost each other and make their suspicious content become more noticeable to users who follow certain tags. It mostly clutters those tags with useless content, annoying those tag followers. But the point of them is to lure in the occasional individual who doesn't know any better; once they click a link, they could fall victim to stuff like:

Automatic exposure to malware

Mature content that requires payment (and might steal personal and financial information at the same time)

Phishing attacks of various kinds

Cryptocurrency and/or NFT scams

Companies that sell fake products (like cheap knockoffs, items that just don't work as promised, and items that are never shipped and might not even exist in stock/inventory)

People who try to recruit for MLM (multi level marketing), pyramid schemes, and similar money pits. These days it could still include wasteful timeshare programs, but now there are AirBnB scams and all sorts of things. Something that requires a time and money commitment and promises profit or some other benefit, but it just drains your energy and funds. Someone profits, but it's not you.

The bots that have no content except links in their descriptions are just hoping someone clicks. Then the unwitting person might fall prey to the same things listed above.

Bots that just follow but have zero content? Well, that's possible but not always true. The ones that truly have zero content might want you to interact with them in messages. Other bots don't have any posts or reblogs, but they might allow you to see the posts they've ❤️'d and/or the blogs they follow. You have to check out their Likes and Follow tabs to get this information, so it makes the blogs seem kind of legit and innocent. You are snooping around their blog, after all, right? But some of the posts they "like" and some of the blogs they follow will send unsuspecting individuals down a rabbit hole that might quickly lead to content blogs with those same suspicious links and too-good-to-be-true schemes.

Harming your blog

Ultimately, their main goals are to part people from their money and steal information. But they can cause problems for your blog, too. Like:

Decreased exposure 1: By making your posts disappear in a sea of junk posts with the same tags, it might be harder for new readers to find your content that matches their interests.

Decreased exposure 2: Similarly, people who follow certain tags and typically read your content that way might stop following those tags. They might choose to follow you directly, but they might not. They might unfollow a tag and then realize they don't recall your blog name. Some will be interested enough to figure it out and others won't.

Damaging your reputation: It's not common now, and changes to the website/app might have actually helped to stop this, but some blogs used to reblog others' posts with one or more images, remove the original text, then add their own links and tags. This happened to several of my old posts, too, and the alterations made it look like I'd posted manga panels or whatever with a link to a porn site or something. I had to report the reblogs and also assure readers that my original posts didn't contain these potentially harmful links. To get this remedied, I think I had to use a special reporting method that allowed me to give the Tumblr reps specific information about what the blogs were doing to my post content. I also explained that those blogs were doing the same thing to posts from other bloggers. Were they truly bots? Idk, but possibly.

Simply put, they can decrease your exposure to readers, make the tagging feature less useful for everyone, and even cause a PR nightmare for your blog. All in the name of trying to scam the occasional person who falls into their traps.