Australia's online safety regulator, eSafety, says Roblox has failed to fix problems that expose children to adult strangers, despite the platform already introducing some safety measures. The regulator had been investigating whether Roblox complied with Australia's Online Safety Act, particularly rules requiring adequate safeguards against contact between adults and children under 16, and its 2026 testing found the platform still "put children at risk."

eSafety's testing found adults could send connection requests to young children without parental consent, that children's and adults' posts on forums outside games were visible to each other without consent, and that children's connections, profiles and biographical details, including names and avatar images, were publicly visible with no way to restrict them. Roblox maintains it meets its legal obligations, but says it will roll out further measures including making children's accounts private by default, blocking adults from contacting unknown children without parental consent, improved complaint reporting, and an independent audit of its safety systems, including age-estimation tools. The company is separately facing a US Senate subcommittee investigation and multiple state lawsuits over child safety in America.