Is BuiltByBit Safe? Buying Minecraft Plugins and Setups Without Getting Burned

Is BuiltByBit safe? The marketplace itself is legit: it's been running since 2014 (as MC-Market until 2022), payments go through Tebex, and there's a real dispute process. The risk is who you buy from and where you pay. Stay inside the checkout and you're covered by the platform's rules. Step outside it and you're on your own.

Building a server and about to spend money on plugins, setups or custom work? If you're still choosing software, start with my server software comparison.

What BuiltByBit is

MC-Market rebranded to BuiltByBit on 2 August 2022, its eighth birthday. Same accounts, and old mc-market.org links redirect. The new name is there because it's not only Minecraft anymore: the site also has sections for Roblox, Fortnite, Hytale, Garry's Mod, Discord and website tools. For Minecraft you'll find plugins, server setups, builds, configs, textures, models and server jars, plus a services section for custom work. Minehut also has the marketplace built into its dashboard now.

What the platform does for you

Here's what BuiltByBit's help center says you get, as of November 2026:

• Tebex takes your money, not the creator. Tebex is the seller of record and sends you a receipt. Cards (including Apple Pay and Google Pay), PayPal and crypto work everywhere, and more methods show up depending on your country. Prices are in USD.
• Staff check every resource before it goes live. For the first 24 hours after approval, other members can report it too. That's BuiltByBit's own description, and it's a listing review, not a promise that the code has been audited.
• Cracked and stolen content is banned. Creators also have to list dependencies, like outside files or license servers, on the resource page.
• You're owed a working copy. That means one that does what the listing said at purchase, plus support. In the first 30 days a creator has to answer a support request within 5 days and sort it out without undue delay, or a refund is due. Bugs have to be fixed in a reasonable time or you're entitled to a refund. A dependency that wasn't disclosed counts as a bug.
• The 90-day removal refund. If BuiltByBit support or a DMCA claim takes down something you bought within 90 days, you can open a dispute for your money back.

What it doesn't do

There's no blanket "changed my mind" refund window. Refunds come from the guarantees above or from a dispute, and a creator can always choose to refund you. Features the listing never advertised don't count, and a plugin is only guaranteed on the versions it listed or what was current when you bought it. If Minecraft updates and the plugin breaks, that's not automatically a refund.

Staff also don't fix creators' products for you. "We do not provide support on behalf of creators," the help center says. And a team review at listing time can't tell you whether a plugin is any good. Closed-source code is something you can't read yourself, so look hard at the seller.

BuiltByBit scams: where people actually get burned

BuiltByBit's own safe-buying guidance is clear that protections only apply when the money goes through the checkout. These are the warning signs it lists:

• Someone asks you to pay another way. Creators aren't allowed to send you off-site to pay. No record on BuiltByBit means nothing to reverse.
• You get moved to Discord to finish the purchase. Support in a creator's Discord is normal. Paying there isn't.
• Unprompted offers, especially with a deadline.
• Lookalike usernames. Scammers copy a real creator's name. A creator's profile lists their numeric Discord user ID in the Information tab. Check it against the account you're actually talking to.
• A paid plugin offered free or cheap. That's a leaked copy. Using one breaks the license and can get your own account banned.

Custom work and services are the other soft spot. Commissions done privately sit outside checkout protections, so keep the agreement in BuiltByBit conversations rather than Discord, where logs can be edited or deleted. A scam report gets the account enforced against, up to a permanent ban, but it can't get your money back. A transaction dispute is the recovery route.

One more thing: don't charge back through your bank. BuiltByBit treats it as grounds for a ban, so open a dispute first.

If something goes wrong: the dispute route

1. Contact the creator from the Licenses page with the "Get resource support" button.
2. If 5 days pass with no reply, or they refuse, open a transaction dispute.
3. Include the transaction details, the resource link, what's wrong and dated proof you tried the creator.

A staff arbiter decides, and the ruling is binding within the platform. Both sides need to be reachable by email within 72 hours, and creators who won't cooperate can be banned.

What Trustpilot says

On Trustpilot, BuiltByBit sits around 2.2 out of 5 from about 73 reviews as of November 2026, with 69% of them one-star. The profile is unclaimed, and Trustpilot notes the company hasn't invited customers to review, so it may not be representative. The complaints are mostly about refunds, support and bans: reviewers say faulty products rarely get refunded, disputes are slow, and sellers can contest a bad review to get it removed. A smaller group, many of them sellers, call it reliable and professional. These are one-off reviewer claims, so read them as opinion. I didn't see malware named in the ones I read.

Over on Reddit, one r/admincraft thread warns fellow admins off a fake-player service sold on the site. Faking your player count is a bad idea anyway.

How to check a resource and seller before buying

1. Read the dependencies tab. If it needs a license server or an activation from the creator, know that first.
2. Match the versions. Is it listed for the server version you run? If you're picking between Paper and Fabric, my Paper vs Fabric piece will help you know what you need.
3. Look at update history and reviews. A plugin that hasn't been touched in a year is a bad bet.
4. Check the seller. Does the numeric Discord ID on their profile match the account that messaged you?
5. Read the license. Licenses are personal. You can't resell or transfer one, even if you sell your server, and a "single project" license is limited to one project.
6. Pay in the checkout, every time.

New to all this? How to make a Minecraft server covers the basics, and you might not need a paid plugin at all.

A free alternative

If you'd rather skip the checkout, Modrinth has a Plugins section for Paper, Spigot and Bukkit-family servers, alongside its mods. Downloads aren't paywalled: its only paid tier, Modrinth Plus, just removes ads. Individual projects can flag paid features, though, so read the listing. I've written up whether Modrinth is safe.

So, is BuiltByBit safe?

Yes, with a condition: the marketplace is legit and its checkout has real protections, but the protections stop where the checkout does. Buy through Tebex, vet the seller, keep deals in writing on-site, and don't touch anything that's suspiciously cheap. Expect refunds to come through the support and dispute rules, not a returns window. The Trustpilot score says plenty of people were unhappy with how that went, so don't spend more than you can afford to lose on a custom job from a stranger.