The warning
unstablesmp.net and unstable.net are not part of our official server, website, or Discord community. Do not treat these domains as alternative addresses for the UnstableSMP community at unstablesmp.gg.
A report to the website team alleges that these sites are fake versions impersonating UnstableSMP and directing players into Discord phishing intended to steal Minecraft accounts. We have not independently verified the reported phishing or account theft. We are sharing this warning so players know which destinations we recognize and what information they should never hand over.
Never give a Discord bot your account codes
If a bot, direct message, or linked verification page asks for your Microsoft password, one-time sign-in code, recovery code, or account token, stop. Sharing those details can give someone access to the Microsoft account you use for Minecraft.
Use these official destinations
Start from this website when joining our community. A familiar logo, server name, or large member count does not prove that an invite belongs to us.
- Website: unstablesmp.gg
- Minecraft server: play.unstablesmp.gg
- Discord: discord.com/invite/unstablesmp-official
Our current Discord invite is the one above. If an old invite or search result takes you somewhere else, return to the official links directory instead of guessing a replacement.
How Discord phishing can target Minecraft accounts
A scam can begin with a promise of server access, a whitelist place, a giveaway, or an invitation to join a creator event. The next step is often described as “verification” or “linking your Minecraft account.” Watch for these warning signs:
- A request for an emailed code. A code from Microsoft may authorize a sign-in or recovery action. Never forward it to a server member or paste it into a Discord bot or unfamiliar form.
- An unexpected Microsoft authorization request. Do not enter a device code or approve an application supplied by a stranger. Even a real Microsoft sign-in page can be part of a misleading request to authorize someone else's application.
- A QR code presented as server verification. Do not scan or approve an unfamiliar login QR code. It may authorize an account session instead of verifying membership.
- Downloads or copied commands. A Discord invite is not a reason to install a launcher, browser extension, “verification mod,” or run a script sent by a bot.
- Pressure to act immediately. Threats of a ban or a rapidly expiring reward are reasons to pause and check the request through a trusted channel.
These are general warning signs, not a claim that we have observed every tactic on the named domains. Discord also advises users to avoid suspicious links and downloads, keep passwords and tokens private, and avoid QR codes they cannot verify. See Discord's advice on protecting against scams.
Protect your account before you join
- Use the official invite linked on this page and inspect the full destination of any later verification link.
- Keep Microsoft and Discord passwords unique. Enable two-factor authentication or a passkey where available, and keep recovery codes private.
- Never send a staff member or bot your password, sign-in code, recovery code, session token, or screenshots containing them.
- Check unexpected requests with moderators reached through the official community. An “official” name or badge alone is not proof of identity.
Already shared a code or approved a login?
Act promptly if you entered credentials, shared a code, authorized an unfamiliar app, or installed a suspicious download.
- Stop interacting with the request. Save the message link and relevant screenshots, with private codes and personal details hidden.
- Use a trusted device. If you installed something suspicious, run a full malware scan before changing passwords on that device.
- Secure your Microsoft account. Open Microsoft account security directly. Change or reset your password, review recent sign-ins and recovery information, and remove unfamiliar access or app permissions. Use the available sign-out controls.
- Recover access if you are locked out. Follow Microsoft's compromised-account recovery instructions. Community moderators cannot restore your Microsoft account.
- Secure Discord too if it was exposed. Reset its password, review authorized apps and sessions, and enable two-factor authentication. Follow Discord's account security guidance.
Report suspicious messages safely
Report the suspicious message through Discord's reporting controls, block the sender, and share the message link with moderators in our official Discord. Include what the message asked you to do, but never include passwords, verification codes, recovery codes, or tokens.
You do not need to visit a suspicious website or complete its verification flow to report a concern. Use the trusted invite below to reach our community.
Open the official UnstableSMP Discord