_Is it_ up to Mojang/Microsoft to police this? Most multiplayer activity takes place on third party servers (I'm pretty sure this is the case for their Bedrock edition as well as Java edition), which have their own teams of moderators and administrators, or are small and private. Not quite sure how phishing etc. plays into this.