Phishing links offering free Roblox currency target children

Children playing Roblox are being targeted by phishing scams promising free in-game currency, according to cybersecurity researchers cited by The Guardian. The scams use fake login pages designed to resemble the legitimate Roblox website. A child may be promised extra Robux after clicking a link shared in a YouTube or TikTok comment or in a Discord chat.

After entering a username, password or two-factor authentication code, the user may be redirected to the genuine Roblox site. That can make the fraud less obvious while allowing criminals to use or sell the stolen details. NordVPN researchers said they found almost 200 addresses offering ready-made phishing pages over a seven-day period.

The fake addresses may contain words such as “Roblox” or “verify”, and the offers often create urgency by claiming they will expire within hours. Robux can be earned in the game or purchased through Roblox’s online store. Packages cost up to £199.99, according to the report.

Criminals may transfer the currency to another account or exploit the personal information associated with a compromised account. NordVPN advised children to open Roblox through its official app or website rather than links sent by others. It also said authentication and backup codes should be treated like passwords and never shared.

Roblox said it had security measures including two-factor authentication and a feature designed to prevent unauthorised logins from elsewhere. The company said it was not generally obliged to restore compromised accounts or recover lost virtual items, although it might do so in very limited circumstances.