Why a safety checklist matters
The Verity mod trend has attracted both legitimate fan creators and bad actors looking to distribute malware. Since the original videos went viral, numerous fake "Verity mod" files have circulated on Discord, Telegram, and sketchy download sites. This checklist helps you distinguish real mods from potential threats.
Red flags — stop immediately if you see these
• Download requires completing a survey or offer
• File is an .exe instead of .jar
• Site has Google Safe Browsing warnings
• No visible changelog or version history
• Download link is from Discord DM or Telegram
Step 1: Verify the source platform
Legitimate Minecraft mods are typically hosted on established platforms with review systems:
- CurseForge — the largest mod platform, with download counts, reviews, and version tracking
- Modrinth — newer platform with similar verification features
- GitHub — some open-source mods publish releases here
Avoid downloading from random file-sharing sites, Discord links, or "mod aggregator" sites you've never heard of.
Step 2: Check the listing details
On CurseForge or Modrinth, look for these signals of legitimacy:
- Download count — real mods have hundreds or thousands of downloads
- Version history — legitimate mods show multiple versions with changelogs
- Last updated date — active mods are updated regularly
- Comments section — real users leave feedback and bug reports
- Creator profile — check if the uploader has other published mods
✅ Green flags — these indicate legitimate mods
• 1000+ downloads with consistent growth
• Multiple versions with detailed changelogs
• Active comment section with real user feedback
• Creator has other published mods
• Clear installation instructions
Step 3: Verify mod requirements
Real mods clearly state what they need to run:
- Minecraft version — e.g., "Requires Minecraft 1.20.1"
- Mod loader — Forge, Fabric, or Quilt
- Dependencies — library mods like GeckoLib, Fabric API, etc.
- Java version — some mods require specific Java versions
If a mod doesn't list requirements, that's a red flag.
Step 4: Check for malware warnings
Before downloading, run these checks:
- Google Safe Browsing — paste the URL into Google's transparency report
- VirusTotal — upload the file after downloading to scan with 70+ antivirus engines
- Browser warnings — if Chrome/Safari shows a red warning, don't proceed
📋 Pre-download checklist
- ☐ Source is CurseForge, Modrinth, or GitHub
- Download count is 1000+
- ☐ Version history shows multiple releases
- ☐ Last updated within the past 6 months
- ☐ Comments section has real user feedback
- ☐ Clear mod requirements listed
- ☐ No Google Safe Browsing warnings
- ☐ File is .jar (Java) or .mcaddon/.zip (Bedrock)
Step 5: Post-download verification
After downloading but before installing:
- Scan with VirusTotal — upload the file for multi-engine scanning
- Check file size — compare against the listing's stated size
- Verify checksum — some creators publish SHA-256 hashes
- Backup your world — always backup before installing new mods
What to do if you already downloaded a suspicious file
If you've already downloaded a Verity mod from an untrusted source:
- Don't open it yet — keep it quarantined
- Scan with VirusTotal — upload for analysis
- Delete if flagged — remove immediately if any engine detects malware
- Run a full system scan — use Windows Defender or your preferred antivirus
- Change passwords — if you opened the file, change important passwords as a precaution