Criminals are targeting children who play Roblox with fake offers of free Robux, using phishing websites to steal login details and personal data. The scams matter because stolen accounts can allow fraudsters to take valuable virtual currency or sell users’ information.

NordVPN researchers found almost 200 addresses selling ready-made Roblox phishing pages during a seven-day period. Links commonly appear in YouTube or TikTok comments and Discord chats, often using urgency; experts advise opening Roblox directly, protecting two-factor authentication codes, and avoiding unsolicited links. Roblox says recovery of lost currency or items is only possible in very limited circumstances.