Children targeted by fake Roblox login sites that steal accounts and virtual currency
Criminals are using counterfeit Roblox login pages, often linked from YouTube or TikTok, to capture children’s credentials and steal their Robux.
A growing scam targets young Roblox players by posting fraudulent links in YouTube, TikTok and Discord that promise free Robux. These links lead to counterfeit login pages that look identical to the official site, often using URLs containing the word "Roblox" such as "Roblox-verify". Victims are asked for their account credentials and sometimes two-factor authentication codes, after which they are redirected to the genuine Roblox site, leaving little clue of the breach.
NordVPN’s vice-president of global affairs, Gerald Kasulis, said researchers identified almost 200 ready-made phishing kits for Roblox within seven days. The stolen login data enables criminals to move or sell Robux, and Roblox states it is not obligated to restore compromised accounts except in rare cases. Security experts, including NordVPN CTO Marijus Briedis, recommend accessing Roblox only through the official app or website and treating authentication codes like passwords.
Why it matters
Kids' personal data and virtual assets are at risk from easy-to-find phishing scams on popular platforms.
In this story
