Hey everyone,
A few weeks ago, I joined Spoke's official SMP Discord server. A few days ago, I was looking through the information channel and scrolled up to where the social media links were listed. I saw a Discord link there, and because I was curious, I clicked it.
The link took me to another Discord server. I looked around first and noticed it had 7k+ members, but most of the channels were empty. There was one channel that seemed to contain the main information/verification stuff. At the time, I genuinely thought this was another server connected to Spoke because I had reached it through the Discord link in what I believed was his official server.
I tried the verification process, and it asked me for my Minecraft username and the email connected to my Minecraft account. Then it told me to use Microsoft Authenticator and approve/enter a code.
I used my mom's email because my Minecraft account was connected to her Microsoft account. Unfortunately, I approved the Authenticator request, and afterward we lost access to the Microsoft account. The email/security information appears to have been changed, and I also lost access to Minecraft.
I now realize that the Authenticator step was a huge red flag, and I really wish I had known that beforehand. I feel awful because my mom's account was affected because of something I did.
What I'm confused about is why that Discord link was in Spoke's official server in the first place. I don't want to accuse Spoke of anything because I genuinely don't know what happened. Spoke has been one of my favorite creators, so this whole situation has honestly been really upsetting and confusing.
Has anyone else experienced something similar with a Minecraft/Discord verification server? Does anyone know whether that other server/link was actually connected to Spoke, or whether it could have been a compromised/outdated link or something someone else added?
Finally, if anyone knows how we could recover the Microsoft account after the email/security information was changed, I'd really appreciate any advice.
I can provide screenshots of the server/link and what happened, but I'll hide any private account information.