Hawaii Vibe Coders: Building a Mutual Credit System on Telegram to Stop Car Rental Scams

I noticed our group wrestling with car rental scams — and then I saw the spark. A bot was born: commontrust.credit. No cash deposits. No middlemen. Just trust, verified through Telegram.

The Spark

A review and reputation system for Telegram groups emerged from real pain points. Car rental scams were disrupting trust. The solution wasn’t another app — it was a credit layer built on existing community behavior.

Mutual credit functionality was introduced: 0-interest lines issued by groups, tied to verified user identities. No bank. No credit check. Just peer-backed trust.

Technical Deep Dive

What Actually Works

The system leverages Telegram’s public user IDs as immutable anchors. Each user’s reputation is cumulative, tied to their @username or user_id. No phone numbers. No emails. No KYC.

Security Rules That Work

Only Admins Can Issue Credit Lines

Credit issuance is restricted to group admins. This prevents sybil attacks. A user can’t issue credit to themselves. Only trusted moderators in a verified group can extend a line.

Reviews Require Two-Party Confirmation

A review isn’t valid unless both renter and owner submit matching metadata: date, vehicle ID, and mutual rating. The bot cross-verifies timestamps and user IDs. Discrepancies auto-flag.

No Public Credit Scores

Scores are never displayed publicly. Only the user and the group admin can view their own credit line balance. This protects privacy while enabling trust.

Code Examples

Review Validation Logic

def validate_review(reviewer_id, subject_id, review_text, timestamp):
    if reviewer_id == subject_id:
        return False, "Self-review blocked"
    if abs(time.time() - timestamp) > 86400:  # 24h window
        return False, "Review too old"
    if not review_text.strip():
        return False, "Empty review"
    return True, "Valid"

Credit Line Issuance

def issue_credit(group_admin_id, user_id, amount):
    if group_admin_id not in get_admins():
        raise PermissionError("Only group admins can issue credit")
    if user_id in blocked_users:
        raise ValueError("User is flagged")
    credit_ledger[user_id] += amount
    log_event(f"{group_admin_id} issued {amount} to {user_id}")

Why This Matters

Protecting Your Users

You don’t need to build a fintech startup to solve trust issues. Sometimes, a 200-line bot in a Telegram group does more than a $5M app.

The Real Risk

The real risk isn’t fraud — it’s normalized distrust. When people stop renting cars because they fear scams, the community loses. This system rebuilds social capital — not just data.

Your Turn

What’s one friction point in your local Telegram group that could be solved with a mutual credit layer? I’m watching. Let’s build it together.