Oct 31, 2026 · News desk · Account safety
DonutSMP fake "verification" Discord scams (Oct 31, 2026): never share a Microsoft code
Updated October 31, 2026. A public thread on X warns about Minecraft Discord servers that allegedly ask for your username, Microsoft email and a verification code. This page is how the trick works, and how to keep your DonutSMP account safe.
We are not official DonutSMP staff. A server name that uses DonutSMP does not make that Discord an official DonutSMP server.
What happened (Oct 31, 2026)
On October 30, 2026 a public thread on X warned that several Minecraft-themed Discord servers are allegedly tied to fake Microsoft "verification" scams. According to the thread, players are asked for three things in a row: their Minecraft username, their Microsoft account email, and finally a verification code. The thread's author asked Discord to investigate; none of it has been confirmed publicly, and one of the server names mentioned uses "DonutSMP" in its title. That does not make it an official DonutSMP server.
This is not a new server event or update. It is a safety explainer, because the same pattern keeps showing up around popular servers like DonutSMP.
Why the code is the whole game
A Microsoft verification code is a one-time sign-in key. If you type it into someone else's form or paste it in a DM, you are handing them a login to your Microsoft account, and with it your Minecraft account: your IGN, your base, your inventory and your balance. Asking for the email first just tells the scammer which account to request the code for.
Red flags to watch for
- A "verify to join" or "verify to keep playing" step that wants your Microsoft email or a code. Normal Discord verification is a button or a captcha, never your Microsoft login.
- Urgency: "your account will be suspended", "last chance", "claim before it expires".
- Rewards for doing it: free money, free spawners, free ranks, giveaways that need you to "log in first".
- A server or bot named like an official community, but reached through a random DM or invite link.
- Anyone asking you to read a code out loud or screenshot your email.
What to do instead
- Never share any code sent by Microsoft, by email or by an authenticator app, with anyone, for any reason.
- Turn on two-step verification on your Microsoft account and keep your recovery email and phone up to date.
- Join DonutSMP only through the address donutsmp.net in Minecraft itself. You don't need a Discord to "verify" before playing.
- If you already typed a code into a strange form, change your Microsoft password right away, sign out of all sessions from the Microsoft account security page, and review recent sign-in activity.
- Report the server or DM to Discord through its normal report button.
Related reads
- DonutSMP account security (Oct 6)
- DonutSMP "money per invite" Discord offers (Oct 29)
- DonutSMP scam reporting: what evidence to save (Oct 28)
Bottom line
If anything asks for your Microsoft email and then a code, it's a sign-in attempt, not verification. Close it.
What this page does not claim
- No new server event or update on October 31, 2026.
- None of the thread has been confirmed publicly.
- A Discord title that uses DonutSMP does not make that server an official DonutSMP server.
Sources
- Public thread on X, October 30, 2026: https://x.com/hardikbhairati/status/2116254759787360371.
- Join address named in this note: donutsmp.net.
Fake verification scams FAQ
No. This is not a new server event or update. It is a safety explainer, because the same pattern keeps showing up around popular servers like DonutSMP.
According to a public thread on X from October 30, 2026, players are asked for three things in a row: their Minecraft username, their Microsoft account email, and finally a verification code. The thread's author asked Discord to investigate; none of it has been confirmed publicly.
A Microsoft verification code is a one-time sign-in key. If you type it into someone else's form or paste it in a DM, you are handing them a login to your Microsoft account, and with it your Minecraft account: your IGN, your base, your inventory and your balance.
Never share any code sent by Microsoft, by email or by an authenticator app, with anyone, for any reason. Turn on two-step verification on your Microsoft account. Join DonutSMP only through donutsmp.net in Minecraft itself. You don't need a Discord to verify before playing.