Also another thing. If your Minecraft account is linked to a Microsoft account, you should give the Microsoft support people transaction IDs of any other things you bought from Microsoft on that account.
As a Hypixel Player thank you for covering this, THIS IS A PROBLEM, a lot of younger players don't really know better and will lose their account, giving the scammer more accounts to scam with, this is especially damaging as it's commonplace on Hypixel Skyblock, a MMORPG game (Think Runescape or World of Warcraft) so players losing their accounts can mean losing thousands of hours of progress.
@@atmosphere2068 It doesn't stop anyone trust me, I mod for a Skyblock discord and we have to ban people for being underage to prevent getting terminated
I play skyblock and it is just sad seeing the amount of dms I get about “join this server for coins” “use this QOL mod for flipping guide” I’m thankful that I have friends and common sense to figure out that it will steal my info, it has gotten to a point in skyblock for there to be a “security sloth” npc in the main skyblock lobby which tells you stuff like “don’t download random mods, don’t give others your password, etc” a few of my friends have been “ratted” which is what we call it idk if others do but it’s just sad seeing a game I love be torn apart by these people
I love how microsoft advertised their mojang>microsoft account migration as "more secure", meanwhile these scams with pretty much no chance of recovery are only possible thanks to microsoft
Mojang accounts have been hacked a lot more often than Microsoft accounts tho. These scams and hacks are much harder to pull off with 2FA enabled, which Mojang accounts couldn’t do at all. Microsoft accounts are definitely more secure. That being said, that email regarding the single-use code from Microsoft is absolutely horribly designed, no warnings about giving this code away.
Now instead of losing your Mojang account, you lose your whole Microsoft account? How is that an improvement? And anyone with a brain knows that coding a website that allows you to add a new email and then delete the old one without any grace period is just straight up stupid. (It’s sad but far too many websites still have this problem)
Pro tip: You dont need the transaction ID to recover your account, instead, you tell the Microsoft Support team to revert any email changes. This had worked for me when someone tried to steal my microsoft account for a different game.
I remember joining a hypixel party with 50+ people and joining their discord server to get my email asked I immediately left it after I realised it was a scam too quickly
3 things: as a owner of a big minecraft disc server way to many ppl have had there account compromised and it’s mostly younger players it’s more common for them to use a qr code to get you to login to your microsoft account most people that are scamming are people that have had there account hacked in the past the transaction id method does not work anymore with the minecraft accounts being transferred to microsoft accounts. even with all the proof that you were hacked and transaction id all support can do is lock your old account.
That's why it's so important to use your brain, securing your Microsoft (or really any account) as much as you can (complex password and change it once a year, 2FA/Multi FA), and being up-to-date with how people steal accounts. I have had my MC account since forever and I do not even know how I purchased it (my dad did for me when I was a kid). No way I am losing it. EDIT: bought it in Dec 2013
i know right? not that i would fall it because im too cautious and paranoid, but it is still a very scary thought bc my microsoft account is like my master key to all of my passwords and EVERYTHING
it would probably be like this: pre-installed on windows 11. install size= 2gb+. light mode on by default/ depends on system theme always running in BG, even if you didn't open it on startup, cant disable, have to manually Remove it everytime. (and then it still shows up on task manager, just like edge or teams) a way worse laggy version available on MS store. more "child-friendly". no bots allowed. no custom emotes. nitro is cheaper/doesn't exists. filter for names, cant choose name freely one free name change and then change name= 15$
I'm an idiot. I'm 20 years old and I fell for this. Someone invited me to an smp server and there was the verify thing. There is NO reason they should've asked for my email, but my brain was on autopilot. My brain was turned off. I wasn't thinking. I feel so stupid for this, I've always been cautious about this stuff, I'm a cautious person in general.
Same happened for me but i gave them my 2nd account. I thought if I have purchased Minecraft on another account noone can verify that is my other account or my main account. After that I noticed that email has been changed on my second account. So basically hacker got an empty account with purchased minecraft, but still I don't know if hacker can get access to something more. Atm I didn't saw any suspicious login attempts on other accounts. Interesting fact is he didn't removed me from friend list on hypixel even if I told in front of him to others he is a scammer
The sad thing about transaction IDs is that a lot of people who bought minecraft in 2014 or longer ago, which now is 10+ years probably did not know the significance of the ID at the time. Now I can't get the code back for reasons with the bank, although I can see the purchase log of the game. I also know of many people who have lost access to their email or bank in some way which made them unavailable to get help when accounts got migrated.
Or like in my case a friend bought Minecraft premium for me in 2013. I also lost the email I made the account on in 2011 so the email was already long gone by the time I got premium. Though surprisingly I was able to migrate from a Minecraft account to a Microsoft account even without access to the original email. I was never able to migrate to a Mojang account but that doesn't matter anymore since everyone is forced to migrate to a Microsoft account anyway. But if I ever lose my account I doubt there would be any way to get it back
The whole feature of "give us your mail and we will send you a one time password to connect to your account with ALL administrative rights" is a serious security breach... Even if there were a protection asking for password for admin changes, I would be really sceptical...
Thank you for covering scams targeting Hypixel players on Discord, especially now that stealing accounts is becoming more prominent. The type of spam you showed is everywhere on it and some people don't even realize the messages are botted. A lot of people just want to join groups with other people they can play with, and that gets exploited. A lot of the awareness has been internal, focused solely on Hypixel UA-camrs not everyone watches. External voices like yours help tremendously
thank you very much for showing people these scams i already know how they work but most done your a life saver for people who don't know how these scams work its truly saddening that you even have to talk about the scams and its such a big problem but you spreading awareness about scams like these just helps even more to prevent people form getting scammed
I fell for it. My experience was horrible. Some random people slid into my Discord DMs telling me to sing for them so I can get the account back, but in reality they just mocked me and sent the voice recordings on their group chats and made fun of me. I never got the account back it is probably sold. It was horrible and I felt miserable. My uncle bought it for me and I can't get a new one.
The funniest part of all of this is is that I had my account purchased for me, and since then the email has gone missing (assumed to be deleted) I have access to the account, can play on it, everything is linked to it, I've made purchases before, etc, etc, but Mojang (as stated on their website) will not provide the transaction ID for any reason. Which means if my account is hacked, it's gone for good.
(1:25) The date for joining Discord and server has had an update recently. They fixed the issue where all locales were forced to the incorrect "MMM D, YYYY" pattern, and are all now using the correct pattern. Took them long enough to fix, but it's done.
Another thing, I ran into this a while ago and didint fall for it. The other guy in the party didint either and we both left cause hellla sketch. Thanks for spreading awareness!
I remember seeing those, I was bored and so I joined one of them. The literal SECOND I saw the discord server, I just automatically said to myself "yeah this is scam no"
a more common one is where they do the same "Need VC" thing so when they join the vc they are muted. Then the scammer asks them to verify using microsofts oauth where they just verify through microsofts own website.After they verify the scammer has access to the minecrafts token even if they change the password.
For all the non skyblock players the word "Perm" is short for permant that means you agree to join a party to do a certain floor of the catacombs the word cata means catacombs and the number means the skill level of your catacombs (im very good at explaining)
I met a similar scam while searching for people to play CSGO with. They invited me to a similar server, used Wick and some type of captcha bot (probably to stop other bots spamming them) and then they asked me to verify my account by logging into steam. Until that point i actually somewhat believed it, sadly. "Lonely" people are easy targets. Keep safe out there guys!
They could just add a feature automatically so when you change the primary email you would need to accept it through the old primary email. It won’t make it bullet proof, but better
@@Allkingec Ah, yes, the one that microsoft, unlike any other site, asks you to get some mobile app for. After transitioning to microsoft, my account is less secure than ever.
Damn, it looks pretty easy to fall for this scam. The discord server looks pretty legit at first glance, so that lowers your guard a bit, just as long as you don't question what they're doing too much. The asking for email and code to verify looks like some random account sign-up process on any website which should be familiar to anyone. The only time you can really catch the scam now is if you realize that the code came from microsoft themselves instead of some random website, but by then, you've already lowered your guard enough to give the scammers your login code 😂 Microsoft should really add a big red "don't share this with anyone" sign to that bot email so scammers can't take advantage of this type of scam anymore.
I'm a large minecraft discord server owner, and we have a legitimate verification bot that uses Microsoft login form and doesn't actually ever receive their info, and we actually have the opposite problem - some people don't trust it and refuse to verify their account. Which is good in a way, because that means there's still hope for minecraft players, to not fall for actual scams :D
Well there is a scam with the official microsoft link that basically you are not giving your account but you are giving then your tocken by logging in, so a Microsoft login form seems a bit sketchy Usually servers make you verify with just the username and they can check if that username is linked to the discord account you sre verifying with
The verifcations on Discord these days tho are getting out of hand. Passport verification to Minecaft IGN. Many people will fall for it if the bot is verified and also if the member is new to Discord also.
Thank you so much for warning us. I almost fell for it, already put in my e-mail and my username. But thankfully I realized how weird this seemed and never put in the code and immediately left the server
I did the exact same thing just last night, put in my email and was about to hit the send verification code button but something didn't feel right at all. Went to do my research quickly and found this video.
0:19 Translation: I need a party to do floor six in the dungeons minigame, we currently have 3 of 5 players needed. Please be over level 24, and use Voice Chat.
I remember that my microsoft account got hacked by a similar discord server and It was painful, but SOMEHOW, I was able to get it back with not much being touch. I think its safe to say is, turn on 2FA. Your gonna need it.
dear ntts, "Doing F6 Perm party cata 24+ we are 3/5 /p me (need vc)" means Doing : Basic english word F6: Floor 6, from the 7 floors available (excluding the entrace which is pretty much a tutorial/included in every other floor, but counting it make them 8) in the catacombs, currently the only dungeon in Hypixel's Skyblock Perm party: Permanency, in this case a party that will go on for quite a long time, extended to days or even weeks cata 24+: The "Catacombs" level of a player, in this case requiring at least 24 to be accepted we are 3/5: them currently being 3 members for a 5 people party, which is the requirement to enter the dungeon /p me: /p shorten from party, which is the command for the server to assign you a party with the player you choose, not limited to skyblock tho (need vc): you know
I feel like it'd at least somewhat slightly help if Microsoft put in the email what the code was for (password reset, one-time sign-in) rather than generic BS.
So I'm a skyblock player and played bedwars with my friend and some guy came and said he needed help with something and did the scam and I almost fell for it before I realized, hey this is the code of my mc account, so I asked my friend and it was a scam and I watched this video. It happened yesterday but I entered my email in it. Am i in any real danger? I didnt put the code in . I was probably targeted cuz I was hypixel level 145 and skyblock level 200 and had 1500 hours of playtime in skyblock
The same thing happened to me bro, but nothing appeared about a code or something similar, It redirected me to a blank page, I've not received anything in my email I think I narrowly saved myself from losing my account but I'm still not sure about that
Yep I’m not proud to say this but I am 17 years old and did still manage to fall for this and lost my Minecraft account which I had spent hundreds of dollars on. I was hundreds of levels deep in bedwars grinding.
ntts has to become more popular, maybe one day I won't read a single "help my account got stolen" message on hypixel then. Fr tho, thanks for spreading awareness, although I think the people who need this advice are not necessarily part of your audience sadly.
I almost fell for a Lunar Client scam a while ago. Sometimes people will say "Duel me for cosmetics" or something, when you win they send you a fake link on Discord that asks for your microsoft email. Remember, NOTHING needs your microsoft account to verify, only your username.
Thankfully, Hypixel has helped a bit and made it so that it is harder for people to fall for these scams. Usually in party finder (the skyblock dungeon finder) these rat bots will be everywhere, and when you join them you get warped to their island where they advertise the Discord Sever as you can’t send those links in chat. However, now you can’t warp the party finer parties and only your own parties, so maybe it’s harder now but some people will still accept the invite from the people and most likely fall for it.
0:24 it took me like 2 minutes to decipher that and i play hypixel skyblock, the different parts and explanations: Doing (creating a) - F6 (Floor 6) - Perm party (permanent-ish group of people) - cata 24+ (probarbly catacombs level 24+ required) - we are 3/5 (we have 3 out of 5 players needed/wanted) - /p me (privat chat me through the mc server) - (need vc) (need to be able to use voicechat so have a microphone)
The message basically means that there are doing floor 6 of the catacombs and you need to be lvl 24 or higher in the catacombs to play (0:26) btw this is skyblock and I grind like 6-8 hours a day on it
I actually did get scammed by this back in January, it was 1 am and I wasn’t thinking straight, but I did get my account back in 2 weeks, however, the main thing Microsoft relied on was that you had an Xbox that you were logged into on that account, because they used that in their investigation to prove that my account was breached
@@xolo_z3565 open a Microsoft ticket and explain what happened, and provide all the detail to the support employee that you can possibly provide, then follow up every 2-3 days and wish for the best
5:00 if you can still find your transaction id, save it somewhere safe. I bought via PayPal when Minecraft came out and they since deleted the bank statements for that period...
BRO YOUR A LEGEND IM IMMEDIATELY GONNA SUB ON YOU YOU DESERVE IT I WAS GONNA DO IT WITH A FEW MIN BUT NOW I KNOW ITS A SCAM IM GONNS SPSM THE LINK OF YOUR VID IN THE SERVER THANK YOU SO MUCH
"F6 Perm party" bassicly just floor six of dungeons but perm party means they play a ton "cata 24+" they have to be catacombs level 24 or more to join the party. Catacombs is from skyblock on hypixel "3/5" Parties for catacombs are normally 5 people because most power. More people makes it easier. 5 ppl is max ammount of people.
I play skyblock and theres so many of these kind of scams. Most of them have you verify a bot to your Microsoft that wants a token. And that token is your ssid. Otp scams are pretty rare.
I've seen a scam where the guy would send in the chat saying he would give you free cosmetics from the feather client, ask for your discord and send you a website, it was identical to the original, but even though it was free he would ask for your email, nick and probably this code verification, I told the guy that the site looked suspicious (I was believing it) and he said "shut up and enter your email"
i was actually going to make a video on this, as i recently wanted to play some bedwars and decided to join one of these parties but they kept insisting i need to join their vc on this sketchy server, but yeah i figured they were trying to rat my account, but yeah thank you for making a video on this!
ive seen this type of scam happen for nearly a year now... whenever you see someone ask for your email its simply not legit. usually if someone says "beat me in a duel and ill get you lunar cosmetics for a yt video" i always ask "will i need to give out my email if i win?" and then they always just ghost me afterwards, hilarious
As a hypixel player I can confirm that the amount of people falling for this is RIDICULOUS, sadly i doubt you reach most of those people. Also there is a scam where they mage you connect an App to your microsoft account (similar to discord integrations) which funnily has the nice security hole of giving away your XBL token and therefore access to your MC account on servers
I feel bad for the people losing their minecraft account to this... I got hacked about a year ago, not even my fault, a databreach leaked my primary email and password, and i managed to recover every single service, except for microsoft. For some reason once your account is hacked and the email address has been changed, it's impossible to get it back. I tried for months with microsoft support and a lot of formus but it's just forever gone... Rip OG account
ntts, there is an easier way to lose your account, the scammers do the same thing but to verify they send you to a link, a normal-looking microsoft link and which is an auth link with an auth button, when you click that button your account is gone
The Message With the F6 Cata 24+ means: ok so: F6 - Floors in the dungeons, which is a part of hypixels biggest minigame (hypixel skyblock) at the dungeons you get rare loot which you can sell for in game money: /P refers too "partying someone" which makes you for the duration of your playthrough, gameplay connected to the player (i mean like playing everything with them like they are on your team) and Cata 24+ meant catacombs level/skill 24+ (skills are a part of skyblock which give you certain advanteges and such.)
There is another account scam where people create fake mods (modifications) People use little mods to make the game slightly easier which are for the most part aloud, but those are .jar files and when you launch minecraft they get executed like an exe file If the code is malicious it still gets excuted and the scammer doesnt own your account but can login, take your skyblock items and be happy
0:26 let me explain this to u (as a hypixel player) theres a gamemode called hypixel skyblock and theres a bunch of mazes called dungeons and floors of the dungeons (f6 is one of them)
I feel stupid, but I fell for this scam at it’s early days 9 months ago. It’s definitely possible to get account back, because I did. You just need to give support as much information as you can ( account info, location, legacy info, used devices, tID’s, Xbox console info on which you was logged in (this one saved me)) But yeah chances are low
man, skyblock's microsoft verification problem is so big that it has reached ntts, it would've been cool if you talked about giving access to apps to steal your account for a bit too
If you want a translation on what that message said “doing floor 6 permeant party catacombs level 24+ we currently have 3/5 people in the party /party me (need vc)”
My question is, how do they send the email to the security email account? I was sent a link to a pretty obvious scam discord. So I made a new email, then made a new outlook account, with the new email as the security address. When I try and login, I can choose to send a one time use code, but I have to enter the email address before it will send. How do they get it to send without that address?
you said minecraft players ignore red flags. my problem was that i saw all the red flags (the guys discord was created 4 hours before he messaged me, the github link he sent had a mod created 4 months ago and the name was of some trusted modder so i thought i was his github💀 and i still checked the mod with my no coding experience and thought it was legit (it was obfuscated)) and still menaged to get ratted and banned...
This time it's really problem with Microsoft, usually I look at the other scams like how could somebody possibly fall for this, but this one I genuinely see how could somebody fall for this one. Usually you dont need just a code to login to your account, microsoft is unique in this, and regular people are not going to be visiting microsoft page frequently so they are not used to this and think of it as: ah yes another of those 2 step verification/linking codes
no im not proud of saying this, but yes i fell into that trap with an account worth at least 300$ i still have a chance of contacting microsoft and i could get the account back if i dont, ive seen my account added into a random guild with around 35 stolen accounts if i dont manage to get my account back ill just ban all of the accounts by buying them a rank and then refunding the rank upgrade, the accounts will be permanently banned within 14 days good way to take revenge if you ask me
Damn they're evolving, the old method was saying 'you win a giveaway/ if u beat me u get a free cosmetic' and then they try get the code to 'verify' your account to get u the cosmetics, had someone try that on me.
Also another thing. If your Minecraft account is linked to a Microsoft account, you should give the Microsoft support people transaction IDs of any other things you bought from Microsoft on that account.
ratio 😭🙏😊
Ok
.GTA_fan_1234681
can clyde swear
ratio lil bro
Those "people" in the voice channels are actually just alt accounts that they put there to make the server look lively.
yeah you can buy a lot of tokens to your server to make it look like there are people in the vc
I thought that too
No one asked
Someone's gonna roast me
Yeah, I figured as much. How pathetic.
@@internet_userrwhat
ntts casually helping minecraft players to avoid scammers while insulting them a little bit, just like a professional mother
ntts is my mother figure
@@masela01 ntts is my father figure
@@Noobyblox ntts is my grandfather figure
@@clinical_racoonntts is my uncle figure
@@sovuchkin5093ntts is my prehistoric ancestor figure
As a Hypixel Player thank you for covering this, THIS IS A PROBLEM, a lot of younger players don't really know better and will lose their account, giving the scammer more accounts to scam with, this is especially damaging as it's commonplace on Hypixel Skyblock, a MMORPG game (Think Runescape or World of Warcraft) so players losing their accounts can mean losing thousands of hours of progress.
youd have to be 13+ to fall for this scam
@@atmosphere2068 It doesn't stop anyone trust me, I mod for a Skyblock discord and we have to ban people for being underage to prevent getting terminated
@atmosphere2068 wrong. People lie about their age.
I play skyblock and it is just sad seeing the amount of dms I get about “join this server for coins” “use this QOL mod for flipping guide” I’m thankful that I have friends and common sense to figure out that it will steal my info, it has gotten to a point in skyblock for there to be a “security sloth” npc in the main skyblock lobby which tells you stuff like “don’t download random mods, don’t give others your password, etc” a few of my friends have been “ratted” which is what we call it idk if others do but it’s just sad seeing a game I love be torn apart by these people
@@atmosphere2068 you mean below 13 right
I love how microsoft advertised their mojang>microsoft account migration as "more secure", meanwhile these scams with pretty much no chance of recovery are only possible thanks to microsoft
Mojang accounts have been hacked a lot more often than Microsoft accounts tho. These scams and hacks are much harder to pull off with 2FA enabled, which Mojang accounts couldn’t do at all. Microsoft accounts are definitely more secure.
That being said, that email regarding the single-use code from Microsoft is absolutely horribly designed, no warnings about giving this code away.
You could recover your Mojang account, but recovering your Microsoft account isn't possible. Seems like it's less secure if anything.
Now instead of losing your Mojang account, you lose your whole Microsoft account? How is that an improvement?
And anyone with a brain knows that coding a website that allows you to add a new email and then delete the old one without any grace period is just straight up stupid. (It’s sad but far too many websites still have this problem)
@@Jwellsuhhuh Disabling 2FA also doesn't require any form of verification. It's as simple as clicking the off button.
nightlibra sighting
Pro tip: You dont need the transaction ID to recover your account, instead, you tell the Microsoft Support team to revert any email changes. This had worked for me when someone tried to steal my microsoft account for a different game.
How can u contact them
@@thomas-wo5qg It’s on the vid, and a quick google search is easy to do.
if the person phishing actually secures the account right this won’t work
@@11jt80it will work, they can just undo all the changes on your account in a said period of time.
Tried this months ago and still havent heard back lol
I remember joining a hypixel party with 50+ people and joining their discord server to get my email asked
I immediately left it after I realised it was a scam too quickly
W 🗿
W
W
@@kfc_rat3054 fr
W
I've been in hypixel skyblock cheating communities and these are VERY common. ty for spreading awareness
Some skyblock mfs have a wholeass market full of scammed accounts ☠️
@@Vyydeo trueing, isnt monarchy one of them, cant remember the actual name
@@paws-at-you Idk who does it though
3 things:
as a owner of a big minecraft disc server way to many ppl have had there account compromised and it’s mostly younger players
it’s more common for them to use a qr code to get you to login to your microsoft account
most people that are scamming are people that have had there account hacked in the past
the transaction id method does not work anymore with the minecraft accounts being transferred to microsoft accounts. even with all the proof that you were hacked and transaction id all support can do is lock your old account.
That's why it's so important to use your brain, securing your Microsoft (or really any account) as much as you can (complex password and change it once a year, 2FA/Multi FA), and being up-to-date with how people steal accounts. I have had my MC account since forever and I do not even know how I purchased it (my dad did for me when I was a kid). No way I am losing it.
EDIT: bought it in Dec 2013
@@DragonyCatyea i’m the same, i got my account back in 2010 and have had it since then. Ain’t no way i’m losing that account now
@@DragonyCat idk about you but I use the microsoft app cuz im paranoid
The one-time password email should make it VERY CLEAR that it's used to log into your account and you should never share it with anyone else.
Welp, the email should make it even clearer and with big red boxes with big text.
But it doesn't, and that's a problem.
Yeah, I was genuinely shocked that the email was so generic and didn't have any warnings *at all*. That's really wild.
i know right? not that i would fall it because im too cautious and paranoid, but it is still a very scary thought bc my microsoft account is like my master key to all of my passwords and EVERYTHING
@@sqrtof81there ARE warnings. How people don't notice them is just beyond stupid.
I like how the scammers were star struck before freaking out and deleting lol
yeah lol bro legit said "aww damn" to me LOLLL
Imagine if Discord had been bought by Microsoft back in the day 💀
oh no not another skype
@@gamezboi_fr
Microsoft tried to buy discord already didn't you know that??? 💀💀💀💀
@@workingcloop5464uh, yeah, thats exactly why he said "imagine" and "back in the day" 💀
it would probably be like this:
pre-installed on windows 11.
install size= 2gb+.
light mode on by default/ depends on system theme
always running in BG, even if you didn't open it on startup, cant disable, have to manually Remove it everytime. (and then it still shows up on task manager, just like edge or teams)
a way worse laggy version available on MS store.
more "child-friendly".
no bots allowed. no custom emotes.
nitro is cheaper/doesn't exists.
filter for names, cant choose name freely
one free name change and then change name= 15$
Probably worse that this is not just Minecraft, its a entire Microsoft account so thats a lot more
I'm an idiot. I'm 20 years old and I fell for this. Someone invited me to an smp server and there was the verify thing. There is NO reason they should've asked for my email, but my brain was on autopilot. My brain was turned off. I wasn't thinking. I feel so stupid for this, I've always been cautious about this stuff, I'm a cautious person in general.
hey, me too bud, me too.
same bro 😭
Same bro and now that mf is using my acc to play on hypixel
Same happened for me but i gave them my 2nd account. I thought if I have purchased Minecraft on another account noone can verify that is my other account or my main account. After that I noticed that email has been changed on my second account. So basically hacker got an empty account with purchased minecraft, but still I don't know if hacker can get access to something more. Atm I didn't saw any suspicious login attempts on other accounts. Interesting fact is he didn't removed me from friend list on hypixel even if I told in front of him to others he is a scammer
The sad thing about transaction IDs is that a lot of people who bought minecraft in 2014 or longer ago, which now is 10+ years probably did not know the significance of the ID at the time. Now I can't get the code back for reasons with the bank, although I can see the purchase log of the game. I also know of many people who have lost access to their email or bank in some way which made them unavailable to get help when accounts got migrated.
Or like in my case a friend bought Minecraft premium for me in 2013. I also lost the email I made the account on in 2011 so the email was already long gone by the time I got premium.
Though surprisingly I was able to migrate from a Minecraft account to a Microsoft account even without access to the original email. I was never able to migrate to a Mojang account but that doesn't matter anymore since everyone is forced to migrate to a Microsoft account anyway.
But if I ever lose my account I doubt there would be any way to get it back
Imagine scammers not having a life, not going outside, not having a job and scam children
Sucks to be a person like them
This wouldn't be a problem is microsoft just reworded that email and called it a one time password to your account instead of just "code"
exactly
indigo polecat!
The whole feature of "give us your mail and we will send you a one time password to connect to your account with ALL administrative rights" is a serious security breach...
Even if there were a protection asking for password for admin changes, I would be really sceptical...
Thank you for covering scams targeting Hypixel players on Discord, especially now that stealing accounts is becoming more prominent. The type of spam you showed is everywhere on it and some people don't even realize the messages are botted. A lot of people just want to join groups with other people they can play with, and that gets exploited. A lot of the awareness has been internal, focused solely on Hypixel UA-camrs not everyone watches. External voices like yours help tremendously
I legit fell for this after seeing so many videos on how not to get scammed this way I’m legit stupid
Did u get your account back yet?
same bro
@@mindfuljosh I got scammed by got my account back just with Xbox support pretty easily
@@LLmaoq how man can you please be elaborate
Bruh 💀💀💀
thank you very much for showing people these scams i already know how they work but most done your a life saver for people who don't know how these scams work its truly saddening that you even have to talk about the scams and its such a big problem but you spreading awareness about scams like these just helps even more to prevent people form getting scammed
I fell for it. My experience was horrible. Some random people slid into my Discord DMs telling me to sing for them so I can get the account back, but in reality they just mocked me and sent the voice recordings on their group chats and made fun of me. I never got the account back it is probably sold.
It was horrible and I felt miserable. My uncle bought it for me and I can't get a new one.
@@hiphopairconditioner I had the same experience lost my 150 hypixel level account so much games it was horrible
The funniest part of all of this is is that I had my account purchased for me, and since then the email has gone missing (assumed to be deleted)
I have access to the account, can play on it, everything is linked to it, I've made purchases before, etc, etc, but Mojang (as stated on their website) will not provide the transaction ID for any reason. Which means if my account is hacked, it's gone for good.
ya better link it to your microsoft account and enable 2fa on it then. im pretty sure you'd be good then
(1:25) The date for joining Discord and server has had an update recently. They fixed the issue where all locales were forced to the incorrect "MMM D, YYYY" pattern, and are all now using the correct pattern. Took them long enough to fix, but it's done.
did you make sure that others have this problem too? since i've never saw anything like that
Another thing, I ran into this a while ago and didint fall for it. The other guy in the party didint either and we both left cause hellla sketch. Thanks for spreading awareness!
people also mimic popular mods, put a rat in them and steal passwords, tokens and session ids. theyre really easy to fall for too
I will put a rat in your house
Better Minecraft they did it with that I'm kind of lucky I don't play modded minecraft
I remember seeing those, I was bored and so I joined one of them. The literal SECOND I saw the discord server, I just automatically said to myself "yeah this is scam no"
SAME EXACT THING
same
a more common one is where they do the same "Need VC" thing so when they join the vc they are muted. Then the scammer asks them to verify using microsofts oauth where they just verify through microsofts own website.After they verify the scammer has access to the minecrafts token even if they change the password.
Same thing happened to me
For all the non skyblock players the word "Perm" is short for permant that means you agree to join a party to do a certain floor of the catacombs the word cata means catacombs and the number means the skill level of your catacombs (im very good at explaining)
In understandable language: Basically you agree to join a party to do this specific dungeon thing
As skyblock player, I can tell that 10-20% of skyblock players actually got hacked this way.
holy shit its p0is
thanks for the bingo splashes
I met a similar scam while searching for people to play CSGO with.
They invited me to a similar server, used Wick and some type of captcha bot (probably to stop other bots spamming them) and then they asked me to verify my account by logging into steam.
Until that point i actually somewhat believed it, sadly. "Lonely" people are easy targets. Keep safe out there guys!
They could just add a feature automatically so when you change the primary email you would need to accept it through the old primary email. It won’t make it bullet proof, but better
How about this: 2 Step verification
@@Allkingec Yes, but this email changing is almost on every single website, and microsoft doesnt have it.
@@Allkingec Ah, yes, the one that microsoft, unlike any other site, asks you to get some mobile app for. After transitioning to microsoft, my account is less secure than ever.
@@Allkingec that’s something you have to put manually on. I’m talking about something that is already done by Microsoft
What if the reason you're changing the email address is because you lost access to the old account?
Damn, it looks pretty easy to fall for this scam.
The discord server looks pretty legit at first glance, so that lowers your guard a bit, just as long as you don't question what they're doing too much. The asking for email and code to verify looks like some random account sign-up process on any website which should be familiar to anyone.
The only time you can really catch the scam now is if you realize that the code came from microsoft themselves instead of some random website, but by then, you've already lowered your guard enough to give the scammers your login code 😂
Microsoft should really add a big red "don't share this with anyone" sign to that bot email so scammers can't take advantage of this type of scam anymore.
im fucking stupid lol
At least a 5% chance to get the account back, better than discord trust and safety...
fax
XD @ntts
did u get it back?
i am that 95%
I'm a large minecraft discord server owner, and we have a legitimate verification bot that uses Microsoft login form and doesn't actually ever receive their info, and we actually have the opposite problem - some people don't trust it and refuse to verify their account. Which is good in a way, because that means there's still hope for minecraft players, to not fall for actual scams :D
Well there is a scam with the official microsoft link that basically you are not giving your account but you are giving then your tocken by logging in, so a Microsoft login form seems a bit sketchy
Usually servers make you verify with just the username and they can check if that username is linked to the discord account you sre verifying with
Just imagine how many accounts ntts will get after this
What do you mean???
@@kookie-py yah
@@Grimzor Give me your account info
Bro just commented a video just by reading the video title 💀
lol if you have any questions ask me i do this quite often
i dont understand how ppl with atleast 2 digit number iq can fall for scam like these
Bro, my iq is apparently 138 but I’m doubting it now
The verifcations on Discord these days tho are getting out of hand. Passport verification to Minecaft IGN. Many people will fall for it if the bot is verified and also if the member is new to Discord also.
Thank you so much for warning us. I almost fell for it, already put in my e-mail and my username. But thankfully I realized how weird this seemed and never put in the code and immediately left the server
Just noticed that someone tried to access my account 30x in the past 24 hours. Stay safe yall
I did the exact same thing just last night, put in my email and was about to hit the send verification code button but something didn't feel right at all. Went to do my research quickly and found this video.
you cant get bored of ntts
0:19 Translation: I need a party to do floor six in the dungeons minigame, we currently have 3 of 5 players needed. Please be over level 24, and use Voice Chat.
Damn... I guess it's good I'm a skeptic when it comes to verification. I've never been hit with this but at least I saw this video before hand.
I remember that my microsoft account got hacked by a similar discord server and It was painful, but SOMEHOW, I was able to get it back with not much being touch. I think its safe to say is, turn on 2FA. Your gonna need it.
0:21 i hate that i understand every word in the sentence
hypixel skyblock brainrot
It’s just a level of dungeons in hypixel skyblock.
F6 - the level of floor (difficulty)
Cata - your skill level
/p me is accept party
What's infuriating about this situation is that Microsoft nor Discord goes after these hackers or their scam discord servers.
"But we're talking about minecraft players, they don't read" lmao pretty sure the majority of players actually never read.
i do (ik im wierd)
dear ntts, "Doing F6 Perm party cata 24+ we are 3/5 /p me (need vc)" means
Doing : Basic english word
F6: Floor 6, from the 7 floors available (excluding the entrace which is pretty much a tutorial/included in every other floor, but counting it make them 8) in the catacombs, currently the only dungeon in Hypixel's Skyblock
Perm party: Permanency, in this case a party that will go on for quite a long time, extended to days or even weeks
cata 24+: The "Catacombs" level of a player, in this case requiring at least 24 to be accepted
we are 3/5: them currently being 3 members for a 5 people party, which is the requirement to enter the dungeon
/p me: /p shorten from party, which is the command for the server to assign you a party with the player you choose, not limited to skyblock tho
(need vc): you know
I fell for this 1 hour ago, i feel so dumb...
same.. im still mourning for my loss
I fell for it yestarday but i wish i get it back with transaction id
sameee
@@maxhostisaaammeee
I feel like it'd at least somewhat slightly help if Microsoft put in the email what the code was for (password reset, one-time sign-in) rather than generic BS.
So I'm a skyblock player and played bedwars with my friend and some guy came and said he needed help with something and did the scam and I almost fell for it before I realized, hey this is the code of my mc account, so I asked my friend and it was a scam and I watched this video. It happened yesterday but I entered my email in it. Am i in any real danger? I didnt put the code in . I was probably targeted cuz I was hypixel level 145 and skyblock level 200 and had 1500 hours of playtime in skyblock
The same thing happened to me bro, but nothing appeared about a code or something similar, It redirected me to a blank page, I've not received anything in my email
I think I narrowly saved myself from losing my account but I'm still not sure about that
2:40 holy never thought i would see one of my plugins again here haha
Yep I’m not proud to say this but I am 17 years old and did still manage to fall for this and lost my Minecraft account which I had spent hundreds of dollars on. I was hundreds of levels deep in bedwars grinding.
F
@@arcturuslight_ u're quite braindead then
F
F
i guess maybe you've already tried and had no luck, but i hope you can manage to get your account back
@@villainousthing i was in support chats for 7+ hours, i am not getting it back.
ntts has to become more popular, maybe one day I won't read a single "help my account got stolen" message on hypixel then.
Fr tho, thanks for spreading awareness, although I think the people who need this advice are not necessarily part of your audience sadly.
0:04 TRUE i have a minecraft server and they are DUMB
This video actually reminded me to check if 2FA was on for my microsoft account, thank you!!
who is here after falling for the scam
Only you😂
not me
@@tauplaz me
@@ArcyaneGaming nice name
@@tauplaz Thx
I almost fell for a Lunar Client scam a while ago. Sometimes people will say "Duel me for cosmetics" or something, when you win they send you a fake link on Discord that asks for your microsoft email. Remember, NOTHING needs your microsoft account to verify, only your username.
I was sent one of these servers, I didn't fall for it bc I have smart
Yes
bro has smart
Thankfully, Hypixel has helped a bit and made it so that it is harder for people to fall for these scams. Usually in party finder (the skyblock dungeon finder) these rat bots will be everywhere, and when you join them you get warped to their island where they advertise the Discord Sever as you can’t send those links in chat. However, now you can’t warp the party finer parties and only your own parties, so maybe it’s harder now but some people will still accept the invite from the people and most likely fall for it.
0:24 it took me like 2 minutes to decipher that and i play hypixel skyblock, the different parts and explanations: Doing (creating a) - F6 (Floor 6) - Perm party (permanent-ish group of people) - cata 24+ (probarbly catacombs level 24+ required) - we are 3/5 (we have 3 out of 5 players needed/wanted) - /p me (privat chat me through the mc server) - (need vc) (need to be able to use voicechat so have a microphone)
The message basically means that there are doing floor 6 of the catacombs and you need to be lvl 24 or higher in the catacombs to play (0:26) btw this is skyblock and I grind like 6-8 hours a day on it
*I bought Minecraft in 2010 with **_CASH_* there never was a transaction ID and there never will be
I actually did get scammed by this back in January, it was 1 am and I wasn’t thinking straight, but I did get my account back in 2 weeks, however, the main thing Microsoft relied on was that you had an Xbox that you were logged into on that account, because they used that in their investigation to prove that my account was breached
bro the EXACT same thing happened to me yesterday can you help me out how did u get it back😭
@@xolo_z3565 open a Microsoft ticket and explain what happened, and provide all the detail to the support employee that you can possibly provide, then follow up every 2-3 days and wish for the best
5:00 if you can still find your transaction id, save it somewhere safe. I bought via PayPal when Minecraft came out and they since deleted the bank statements for that period...
Another scam, bruh, it’ll never end.
if you fall for this youre just retarded
as someone with thousands of hours on hypixel, I genuinely thought that they had to be even a little subtle. this one just seems so braindead
0:20 F6 means floor 6, its a place called dungeons in hypixel skyblock and cata means catacombs, as hes refering to his level
BRO YOUR A LEGEND IM IMMEDIATELY GONNA SUB ON YOU YOU DESERVE IT I WAS GONNA DO IT WITH A FEW MIN BUT NOW I KNOW ITS A SCAM IM GONNS SPSM THE LINK OF YOUR VID IN THE SERVER THANK YOU SO MUCH
"F6 Perm party" bassicly just floor six of dungeons but perm party means they play a ton "cata 24+" they have to be catacombs level 24 or more to join the party. Catacombs is from skyblock on hypixel "3/5" Parties for catacombs are normally 5 people because most power. More people makes it easier. 5 ppl is max ammount of people.
I play skyblock and theres so many of these kind of scams. Most of them have you verify a bot to your Microsoft that wants a token. And that token is your ssid. Otp scams are pretty rare.
Wow I hope Microsoft and Discord are aware of this same for public server owners
I've seen a scam where the guy would send in the chat saying he would give you free cosmetics from the feather client, ask for your discord and send you a website, it was identical to the original, but even though it was free he would ask for your email, nick and probably this code verification, I told the guy that the site looked suspicious (I was believing it) and he said "shut up and enter your email"
i was actually going to make a video on this, as i recently wanted to play some bedwars and decided to join one of these parties but they kept insisting i need to join their vc on this sketchy server, but yeah i figured they were trying to rat my account, but yeah thank you for making a video on this!
0:19 why it reminds me of roblox tower obby games, some of them use "cata" As catastrophic difficulty, and f6 as floor 6
ive seen this type of scam happen for nearly a year now... whenever you see someone ask for your email its simply not legit. usually if someone says "beat me in a duel and ill get you lunar cosmetics for a yt video" i always ask "will i need to give out my email if i win?" and then they always just ghost me afterwards, hilarious
As a hypixel player I can confirm that the amount of people falling for this is RIDICULOUS, sadly i doubt you reach most of those people.
Also there is a scam where they mage you connect an App to your microsoft account (similar to discord integrations) which funnily has the nice security hole of giving away your XBL token and therefore access to your MC account on servers
seeing this with social anxiety i see this as a absolute win
0:24 with almost 5.000 hours in this game i undertood this shit better than my own native language...
I feel bad for the people losing their minecraft account to this... I got hacked about a year ago, not even my fault, a databreach leaked my primary email and password, and i managed to recover every single service, except for microsoft. For some reason once your account is hacked and the email address has been changed, it's impossible to get it back. I tried for months with microsoft support and a lot of formus but it's just forever gone... Rip OG account
ntts, there is an easier way to lose your account, the scammers do the same thing but to verify they send you to a link, a normal-looking microsoft link and which is an auth link with an auth button, when you click that button your account is gone
Just wait till he finds out about ratting
The Message With the F6 Cata 24+ means: ok so: F6 - Floors in the dungeons, which is a part of hypixels biggest minigame (hypixel skyblock) at the dungeons you get rare loot which you can sell for in game money: /P refers too "partying someone" which makes you for the duration of your playthrough, gameplay connected to the player (i mean like playing everything with them like they are on your team) and Cata 24+ meant catacombs level/skill 24+ (skills are a part of skyblock which give you certain advanteges and such.)
There is another account scam where people create fake mods (modifications)
People use little mods to make the game slightly easier which are for the most part aloud, but those are .jar files and when you launch minecraft they get executed like an exe file
If the code is malicious it still gets excuted and the scammer doesnt own your account but can login, take your skyblock items and be happy
finally a video about this i was one of the ppl the DM u about this
0:26 let me explain this to u (as a hypixel player) theres a gamemode called hypixel skyblock and theres a bunch of mazes called dungeons and floors of the dungeons (f6 is one of them)
I feel stupid, but I fell for this scam at it’s early days 9 months ago. It’s definitely possible to get account back, because I did. You just need to give support as much information as you can ( account info, location, legacy info, used devices, tID’s, Xbox console info on which you was logged in (this one saved me))
But yeah chances are low
i just fell for it yesterday😭 so just contact support? i have an xbox
@@xolo_z3565yeah go with live chat, but make sure you used atleast a bit your account on Xbox console
hi, can you give me your contact information? I recently had a similar situation and I would like to know what helped you get out of it
The kiss at the end always makes my day ❤
I lost my account this way recently, now im depressed, the microsoft guys won't reply to me either
Lmao, scammers just freaking out knowing it's you was amazing
"cata" is the only word I recognize at 0:21 which means catacombs on hypixel skyblock
man, skyblock's microsoft verification problem is so big that it has reached ntts, it would've been cool if you talked about giving access to apps to steal your account for a bit too
If you want a translation on what that message said “doing floor 6 permeant party catacombs level 24+ we currently have 3/5 people in the party /party me (need vc)”
My question is, how do they send the email to the security email account? I was sent a link to a pretty obvious scam discord. So I made a new email, then made a new outlook account, with the new email as the security address. When I try and login, I can choose to send a one time use code, but I have to enter the email address before it will send.
How do they get it to send without that address?
this is the most obvious scam ever bro even a 10 year old with intellegence would not fall for this
the f6 perm party thing is a skyblock term im pretty sure
you said minecraft players ignore red flags. my problem was that i saw all the red flags (the guys discord was created 4 hours before he messaged me, the github link he sent had a mod created 4 months ago and the name was of some trusted modder so i thought i was his github💀 and i still checked the mod with my no coding experience and thought it was legit (it was obfuscated)) and still menaged to get ratted and banned...
Honestly, they should atheist have an email sent to the email trying to get removed so it can be harder.
This time it's really problem with Microsoft, usually I look at the other scams like how could somebody possibly fall for this, but this one I genuinely see how could somebody fall for this one.
Usually you dont need just a code to login to your account, microsoft is unique in this, and regular people are not going to be visiting microsoft page frequently so they are not used to this and think of it as: ah yes another of those 2 step verification/linking codes
The message basically means that they need to play with gigachad multiple times with vc
no im not proud of saying this, but yes i fell into that trap with an account worth at least 300$
i still have a chance of contacting microsoft and i could get the account back
if i dont, ive seen my account added into a random guild with around 35 stolen accounts
if i dont manage to get my account back ill just ban all of the accounts by buying them a rank and then refunding the rank upgrade, the accounts will be permanently banned within 14 days
good way to take revenge if you ask me
Damn they're evolving, the old method was saying 'you win a giveaway/ if u beat me u get a free cosmetic' and then they try get the code to 'verify' your account to get u the cosmetics, had someone try that on me.