MCPVP is one of the largest competitive Minecraft servers now, with over 20,000 people playing daily. McPVP has a website for leaderboard called MCTIERS. Anyone from the community can get ranked after an evaluation by the staff of McPVP by playing on the server.
Because of this, hundreds of scammers have created a phishing scam, where they would promise to evaluate players to get ranked on MCTIERS. If you go to Discord and on Discover type "mcpvp", the second (sometimes first) that appears is a server that claims to be the official mcpvp.club community to get verified. This server has over 40,000 members and 32 Nitro boosts.
Do not be fooled, this server is FAKE. All channels are blocked, and in one particular channel called "#verify", there is an Appy bot form that asks for your Minecraft Gamertag and the email you use for Microsoft. When you put in the email, it will ask for the Microsoft verification code sent to your email. As soon as you put in the verification code and send, it's over.
Your account (both email and Microsoft) will be hacked, changed passwords and address, and will completely block you out of it, and not even Microsoft will be able to do anything for you. Your account will be over. If you have put your credit card information and saved it to your account, you might as well go to your bank RIGHT AWAY.
I told my friend, u/Sleepy-furret, to put in the things they asked (sounds dumb). The server did look legit, and I also didn't check the obvious signs (that's on me), and his Microsoft account got hacked because of me and Microsoft couldn't do shit, and the account is now lost forever. For personal matters, I'll be paying him back for what he lost in the account (such as the Minecraft: Java & Bedrock Edition). For more experienced people, they will most certainly realize that the server is a phishing scheme, however, for other people that might not understand very much, they could fall in the trap and lose their accounts, just like I made my friend do.
I made a report to Discord support for them to take action against the server (I also reported the message of Appy), and when they got back at me, they said I should report the message (???). The server is STILL ACTIVE, and people can and will still fall for the scam, and I don't really know how I can contribute to stop it, other than telling you guys on Reddit.
In short: Never give Microsoft verification codes to ANYONE on ANYWHERE other than Microsoft itself, even if it looks legit elsewhere.