Nov 4, 2026 · News desk · Safety
DonutSMP bot DMs (Nov 4, 2026): how to stop the spam messages and keep your account safe
New players keep asking why random accounts DM them every few minutes on DonutSMP. Here is what those bot messages are, the commands that mute them, and the one thing you should never type.
We are not official DonutSMP staff.
On Nov 4, 2026, the most common new-player complaint we keep seeing about DonutSMP is not a wipe or a rule change. It is private messages. A player posting on X on Nov 3 summed it up: a bot DM "every 3 minutes," no obvious way to report them, and invitations to a site for "free money." No new official rule or fix has been announced, so here is a practical guide to what these messages are and how to shut them up.
What the bot DMs look like
Reports on r/DonutSMP going back to March 2026 describe the same pattern again and again:
- A random account (players often mention Bedrock-style names that start with a dot) sends "hi" or "wsp".
- If you reply, more accounts pile in with "do you", "wanna join my team", or a line like "we got 915 skellies".
- Then comes a Discord name or a website that promises free money, spawners, or a team.
Players in those threads describe it as an account-stealing setup: the Discord or site asks you to "verify," wants your Microsoft email, and then asks for the one-time code Microsoft sends you. Whoever gets that code can take over the account and empty it. We cannot confirm every case, but the warning is consistent across many unrelated players.
How to stop the messages
Commands below are the ones players and public command lists cite most often. Type /help in game if one does not work for you, since names can change.
- Do not reply. Several players note that answering seems to bring more bots. Silence is the fastest fix.
/ignore <name>blocks one sender. Good for a single persistent account.- Turn private messages off with
/msgtoggle(also listed as/togglepm), or switch PMs off in the/settingsmenu. One Reddit reply put it plainly: blocking one name at a time will not keep up when there are thousands of bot accounts, so the settings toggle is the real fix. - Turn PMs back on only when you are actually trading with someone you know, then turn them off again.
- Need staff? Public command lists mention
/helpopfor messaging staff in game. Use it for real problems, not to argue with a bot.
The one thing to never do
Never type a Microsoft email code, a password, or a "verification" code into a Discord bot, a website, or a DM. No legit DonutSMP team, giveaway, or trader needs it. If you already did:
- Change your Microsoft account password right away from a trusted device.
- Sign out of other sessions and turn on two-step verification in your Microsoft account security settings.
- Check that your recovery email and phone are still yours.
This ties in with two recent pieces on our news desk: the money-per-invite Discord offers and the fake cheat client malware campaign. Same idea every time: if a stranger promises free money, the price is your account.
Quick checklist
- PMs off in
/settingsor with/msgtogglewhile you grind. /ignoreanyone who keeps pushing a Discord or site.- Never paste codes or log in through a link someone DMed you.
- Trade only with people you trust, and use the trading checklist before you accept.
Related reads
- DonutSMP 'money per invite' Discord offers (Oct 29, 2026): what to check before you join
- Fake DonutSMP cheat clients are spreading password-stealing malware (Nov 3, 2026)
- DonutSMP trading checklist (Oct 3, 2026): verify items before you accept
Sources
- Public X post from @TAK_alligator (Nov 3, 2026).
- r/DonutSMP thread "Is anything going to be done about the spam bots?" (Mar 3, 2026).
- r/DonutSMP thread "Mysterious messages in game?" (Mar 24, 2026).
- r/DonutSMP thread "We got 915 skellies rn bots" (Mar 24, 2026).
- Public DonutSMP command lists.
We are not official DonutSMP staff.