0

Play Now

Click to Copy IP
0

Discord

Click to join

probably a scam lol

probably a scam lol

WatermelonMan said:
View attachment 33193
Click to expand...
I got the same message and I decided to go through, because I wanted to know what the scam players are being put through is like. This will allow us to warn players more effectively. Here's my story:

I added the guy on Discord. He gives me an invite to this scam server, which I join, and it asks me to put in my Minecraft username and email to "verify". You can't get hacked just by giving up that information, so I entered it. However, I should note that a genuine verification process, such as Invaded's, would only need your username and a verification step in Minecraft, like /register. They don't need your email for that. However, they do need your email to make a login attempt, which is the next step of the scam.

They attempted to log in using my Microsoft Authenticator app. I DID NOT CLICK on that. IF YOU DO THAT, YOU WILL BE HACKED. Should you get a Microsoft Authenticator request you don't expect, ignore it and let it time out.
1769203224243.webp

That was their idea, at least. What actually happened is that they did it wrong, and it sent me an email for a single-use login code. If they ask you for that, DO NOT GIVE THEM THAT EITHER. YOU WILL GET HACKED. The email with the single-use code tells you not to share it with anyone and to only put it into an official Microsoft site. If you instead give it to the scammer, he will do this on your behalf on his computer, hacking your account.

I didn't give up any codes, so the scam failed. They kicked me from their scam server, and the guy who originally DMd me the invite deleted the invite message so that I wouldn't be able to report it. I reported the guy for "Scamming or Defrauding" to Discord anyway, because they likely would have logs of deleted messages. I logged into my Minecraft account normally afterward, which did correctly use my Authenticator app.

Your best bet for avoiding this scam, of course, is not to message them in the first place. I did this purely for educational purposes.
 
EnderEyeGames said:
I got the same message and I decided to go through, because I wanted to know what the scam players are being put through is like. This will allow us to warn players more effectively. Here's my story:

I added the guy on Discord. He gives me an invite to this scam server, which I join, and it asks me to put in my Minecraft username and email to "verify". You can't get hacked just by giving up that information, so I entered it. However, I should note that a genuine verification process, such as Invaded's, would only need your username and a verification step in Minecraft, like /register. They don't need your email for that. However, they do need your email to make a login attempt, which is the next step of the scam.

They attempted to log in using my Microsoft Authenticator app. I DID NOT CLICK on that. IF YOU DO THAT, YOU WILL BE HACKED. Should you get a Microsoft Authenticator request you don't expect, ignore it and let it time out.
View attachment 33195

That was their idea, at least. What actually happened is that they did it wrong, and it sent me an email for a single-use login code. If they ask you for that, DO NOT GIVE THEM THAT EITHER. YOU WILL GET HACKED. The email with the single-use code tells you not to share it with anyone and to only put it into an official Microsoft site. If you instead give it to the scammer, he will do this on your behalf on his computer, hacking your account.

I didn't give up any codes, so the scam failed. They kicked me from their scam server, and the guy who originally DMd me the invite deleted the invite message so that I wouldn't be able to report it. I reported the guy for "Scamming or Defrauding" to Discord anyway, because they likely would have logs of deleted messages. I logged into my Minecraft account normally afterward, which did correctly use my Authenticator app.

Your best bet for avoiding this scam, of course, is not to message them in the first place. I did this purely for educational purposes.
Click to expand...
It was pretty obvious it was scam from the start, no one would just give away Invaded like that.
 
General Discussion
Back