Roblox Players Targeted: Virtual Currency Theft Rises

Children playing Roblox are increasingly targeted by phishing scams designed to steal their in-game currency, Robux, and personal information. Fraudsters use convincing fake login pages, often advertised via links on platforms like YouTube and TikTok, to trick unsuspecting users. These fake sites redirect victims to the legitimate Roblox site, making the scam hard to detect.

Researchers have identified numerous readily available phishing kits on the dark web. These kits enable criminals to create deceptive login portals that capture usernames and passwords, and sometimes even two-factor authentication codes. Once acquired, these details can be sold or used to drain Robux from player accounts.

To combat this, experts advise children to access Roblox directly through official apps or websites rather than following suspicious links. While two-factor authentication is a crucial safeguard, users must never share authentication or backup codes with anyone. Roblox itself states it has no obligation to restore stolen virtual currency or items, though exceptions may occur in very limited circumstances.