London: Roblox players, including children, are being targeted by phishing scams that promise free or additional Robux in an attempt to steal their login details.
Robux is Roblox’s virtual currency, which players can use to purchase items such as avatar skins, animations, and other virtual products. The currency can be earned in the game or purchased through Roblox, with packages costing up to £199.99.
Ready-made phishing kits
Scammers use ready-made phishing kits to create fake Roblox login pages that closely resemble the official website. Links to these pages can be shared through comments on YouTube and TikTok videos or through gaming chats on Discord.
The messages often claim that users can receive free Robux by clicking a link. Some offers create a sense of urgency by suggesting that the promotion is available for only a limited period.
After clicking the link, users are directed to a fake sign-in page where they may be asked to enter their Roblox username and password. In some cases, scammers also request two-factor authentication or backup codes.
The fraudulent website may then redirect the user to the legitimate Roblox platform, allowing them to continue playing without immediately realising that their information has been stolen.
Once obtained, login credentials can be sold to other criminals or used to access accounts and transfer Robux or virtual items to another account. Research cited in the report found almost 200 addresses offering ready-made phishing pages designed to target Roblox users over a seven-day period.
Use only official app/website
Parents and children are advised to access Roblox directly through the official app or website rather than using login links received through messages, comments or other online platforms. Two-factor authentication should also be enabled, while authentication and backup codes should never be shared with others.
Users should avoid clicking links or downloading files from unknown senders and websites, particularly when they promise free Robux or other rewards.
Roblox says it has security measures including two-factor authentication and features designed to prevent unauthorised account access. The company also states that it does not guarantee the restoration of compromised accounts or recovery of lost virtual items or currency.
In limited circumstances, Roblox may recover lost items or their value. The platform continues to develop measures aimed at reducing the risk of account theft.
Roblox users can reduce the risk of account theft by avoiding suspicious links, accessing the platform through its official app or website and keeping login and authentication details private. Parents can also help children recognise fake Robux offers and other common online scams.
MOST READ | Pope Leo arrives in France for talks on AI and Europe
