Skip to content

Duplicate items and suspicious accounts

Fiveops is not an anticheat. These two tools help your staff audit the economy and accounts: they show what they found and why, and every decision stays with a person. Nothing is removed, kicked or banned automatically.

The settings are in the panel under Configuration → Duplicates and suspicion. Only ox_inventory is supported.

Some items should exist only once: ox_inventory gives every weapon its own serial number (serial). When two items carry the same serial number, one of them is a copy. Fiveops looks for these across:

  • players in game (from ox_inventory’s live data) and offline characters,
  • vehicle trunks and gloveboxes,
  • stashes (ox_inventory’s stash table, Fiveops stashes included).
SettingDefaultWhat it does
Unique fieldsserialMetadata fields that should be unique. Add your own, such as an ID card number field.
Skipped itemsnoneItems that share a serial number on purpose, such as keys or copied cards.
Scheduled scanevery 6 hours1, 3, 6, 12 or 24 hours, or off. The first scan starts 10 minutes after the server starts.

Empty values and placeholders such as none or 0 are ignored. A stack of two items with the same serial number in one slot counts as a duplicate too.

The report is under Inventories → Duplicates in the panel and in the in-game menu. Each group shows the item, the serial number, the total count and where the copies are: whose inventory, which vehicle, which stash and slot, and the owner of the vehicle or stash. Staff with Start a duplicate scan can run a scan right away; the result shows up within a few minutes.

  • Clean up copies: pick which copy stays; every other copy with that serial number is removed from players, vehicles and stashes. Needs Bulk item delete and edit rights on the containers.
  • Remove here: removes the copies in a single container. Needs Remove item.
  • Mark as cleaned: hides the group from the open list. A cleaned group comes back if the next scan still finds it.

Every scan, cleanup and mark is written to the Fiveops log. Online containers are changed live; offline ones in the database.

Each account (the player’s Rockstar license and all its characters) gets a score from 0 to 100 made of these signals:

SignalPoints
Sudden wealth gainUnreviewed economy alerts in the last 30 days: 15 per sudden gain, 8 per large transaction, at most 40.
Duplicated items20 per duplicate group in the last scan the account holds a copy of, at most 45.
Same IPAnother account connected from the same IP: 12 for the first, 6 for each one after, at most 25.
Shared hardwareAnother account connected from the same device: 25 for the first, 10 for each one after, at most 40.

No single signal can cross the default threshold of 50 on its own; it takes two different signals together. An IP or device shared by more than 8 accounts (dorms, internet cafes, VPN exits) doesn’t count. You can turn each signal off; an IP or device signal that’s off is never sent from the game server.

The list is under Players → Suspicious accounts, and the score with its reasons is on the player card’s Audit tab. Staff with Mark account reviewed can mark an account; it isn’t flagged again unless its score rises.

When an account crosses the threshold, staff in game who can see suspicious accounts get a card, and it’s written to the Fiveops log (and to your Discord log channel if you forward that category). You can turn the card off with Alert staff in game.

The player’s IP address and device IDs are hashed on your game server with a key that is created there and never sent to Fiveops (HMAC-SHA256). Fiveops only receives the hash, so the IP address can’t be recovered from it. IPv6 addresses are grouped by their /64 network; local and private addresses are skipped. A hash is deleted 30 days after it was first recorded; account entries and scores 30 days after the account was last seen.

PermissionAllows
View duplicate itemsThe duplicates report.
Start a duplicate scanRunning a scan right away.
View suspicious accountsThe list and the score on the player card.
Mark account reviewedMarking an account as reviewed at its current score.