EconGuard

# EconGuard

RoyalPlugins: (https://discord.gg/D3HRBJXsHj) · (https://github.com/joogiebear/EconGuard/wiki) · (https://github.com/joogiebear/EconGuard/issues) · (https://github.com/joogiebear/EconGuard)

Shared economy audit ledger and anti-abuse / RMT-detection core for Paper. Requires Paper 26. 2 or newer.

EconGuard doesn't move money and has no player-facing features. It's the piece the other economy plugins report to: one ledger, one place to look, one audit trail for a ban or rollback.

Part of a suite with (https://github.com/joogiebear/RoyalBank), (https://github.com/joogiebear/RoyalAuctions) and (https://github.com/joogiebear/RoyalBazaar) — but the API is public and generic, so any plugin can feed it.

## Contents

• (#why-a-separate-plugin)
• (#what-it-can-and-cannot-do)
• (#install)
• (#commands--permissions)
• (#configuration)
• (#the-detection-signals)
• (#tuning)
• (#developer-api)
• (#storage)
• (#building)

## Why a separate plugin

Every economy plugin ends up growing its own half-blind anti-abuse layer. The bank sees deposits, the auction house sees sales, the shop sees purchases — and none of them see each other, so the one pattern that actually matters is invisible to all of them:

> a three-day-old account receives 500M through an auction "sale" of a dirt block, immediately banks > it, and withdraws it over the next week.

The bank sees a big deposit. The auction house sees a weird sale. Neither sees RMT. EconGuard sees the whole chain because everything reports into one ledger, and correlation runs across sources.

That's also why it's a standalone plugin rather than a library: with a library each plugin gets its own copy of the state and they still can't see each other.

## What it can and cannot do

Can: surface suspicious patterns, keep a unified per-player money history, correlate counterparties across bank/auction/shop/pay, and give you an evidence trail for enforcement.

Cannot: prevent real-money trading. RMT is an out-of-game agreement; the in-game half looks exactly like a legitimate gift. Nothing running on your server can distinguish them with certainty — which is why EconGuard flags for staff review and never auto-punishes. A false ban costs you far more than a missed flag.

To actually cap the damage, pair it with friction in the economy itself: a maximum currency cap, and limits/cooldowns/tax on player-to-player transfers.

1. Drop `EconGuard.jar` into `plugins/`. 2. Start the server. 3. Any suite plugin present will start reporting automatically — no wiring needed.

EconGuard has no hard dependencies. If it isn't installed, the reporting plugins simply skip the call.

## Commands & permissions

Base command `/econguard`, aliases `/eg`, `/econ`.

| Command | | |---|---| | `/eg flags` | List accounts flagged for review | | `/eg flags clear ` | Clear all flags, or one player's | | `/eg history ` | That player's unified money history across every source | | `/eg stats` | Ledger size, flag count, detection status | | `/eg reload` | Reload `config.yml` |

| Node | Default | | |---|---|---| | `econguard.admin` | `op` | The commands above | | `econguard.alerts` | `op` | Receive alerts and flag notices in chat |

## Configuration

```yaml currency-symbol: "$" # formatting for alerts only notify-staff: true # ping online econguard.alerts holders discord-webhook: "" # optional; blank = off

database: file: "econguard.db" max-rows-per-player: 500 # pruned on startup. 0 = unlimited

# "Young account" definition — see below. Either condition qualifies. young-account: max-age-days: 3 max-playtime-hours: 10

detection: large-transaction: 100000000. 0 young-incoming-transfer: 50000000. 0 velocity: enabled: true window-minutes: 30 threshold: 250000000. 0 counterparty: enabled: true window-minutes: 60 threshold: 500000000. 0 ```

## The detection signals

The `young-account` gate is the core idea. Two of the four signals only fire on young accounts, and that's deliberate: a veteran who legitimately sells a lucky drop for 200M is not suspicious, and flagging them is how an anti-abuse system trains staff to ignore it. What is suspicious is wealth arriving with no time invested — that's the actual RMT fingerprint, and the one thing a buyer can't fake without playing the game.

An account is "young" if it joined within `max-age-days` or has under `max-playtime-hours` playtime. Either qualifies — an alt farmed to 4 days old but with 20 minutes played is still young.

| Signal | Fires when | Gate | |--