Australia's eSafety Commissioner has found that Roblox is still failing to prevent adults from contacting and grooming children on its platform, despite safety changes introduced last autumn. Following its own testing, the regulator concluded the gaming platform, used by 1.7 million Australian children, breaches obligations under the Online Safety Act to block unwanted adult-child contact and set children's accounts to private by default. Roblox has now entered a court-enforceable agreement to fix the gaps within three months, though the company maintains it believes it is already meeting its legal obligations.

eSafety's testing found adult strangers could still send connection requests to children without triggering parental alerts, while children's profiles, contact lists and biographical details remained visible to anyone, with no way to restrict access. Adults could also search for and comment on children's posts in forums outside game environments without carer consent. Commissioner Julie Inman Grant said Roblox can no longer "mark their own homework" and must submit to independent third-party auditing of its child-safety tools going forward. Roblox has pointed to recent measures such as facial age verification and new "Kids" and "Select" accounts for under-16s as evidence of its commitment to safety.