My son’s Roblox account got hacked, here’s what every parent needs to know

Turning panic into a teachable moment

I looked at him and said, “Okay, this is a clear case of an account takeover. What do you think you need to do?”

Without hesitation, he replied, “I need to change my password, if I still have access to the account.”

“Go,” I told him.

He immediately opened Roblox, navigated to the settings, and successfully changed his password. Then he turned to me and said, “Next, I need to activate two-factor authentication.” He went ahead and linked his email for 2-Step Verification.

I nodded, proud. “What’s next?”

He answered, “I need to kick out any logins I don’t recognize.” He opened the Security tab, reviewed the active sessions, and remotely logged out all devices except for the one he was currently using. We even double-checked the IP addresses to confirm that nothing suspicious remained. We then scanned his computer for potential malware infections.

Then, together, we filed a report with Roblox Support to flag the unauthorized transaction and account access, requesting an investigation and, hopefully, a refund of his lost Robux.

Kids are prime targets

My son did everything right, but that doesn’t mean the threat is over. Roblox is more than a game. It’s a platform where virtual assets have real-world value, making every child’s account a potential payday for cybercriminals.

Hackers use stolen passwords, fake Robux promos, and phishing links disguised as giveaways to compromise accounts.

And while many kids don’t realize it, they’re often more vulnerable than adults because they’re trusting and usually unaware of how phishing, password leaks, or fake Robux offers work. All it takes is one reused password or one bad link.

What to do if this happens to you or your child

If you ever receive an alert from Roblox about suspicious activity, or notice that Robux are missing from your account, do the following immediately:

1. Change the password right away—make sure it’s long, unique, and hard to guess.
2. Enable 2-Step Verification (2SV) from your Roblox settings for an extra layer of security.
3. Log out of all other sessions to disconnect any unauthorized access.
4. Report the incident to Roblox Support via https://www.roblox.com/support. Choose “Account Hacked” or “Unauthorized Charges.”
5. Scan your device for malware to make sure no keylogger or spyware is running in the background.

Teach cyber hygiene early

I’ve always been strict with my son when it comes to online safety—don’t share passwords, don’t click suspicious links, and never trust “free Robux” offers. That mindset saved him this time.

To fellow parents, please talk to your kids about cybersecurity. Roblox may appear to be a harmless game, but behind every avatar could be someone trying to exploit a weakness.

If your child uses Roblox, help them:

1. Use a secure, original password (and store it safely)
2. Turn on 2FA (Two-Factor Authentication)
3. Know how to report issues to Roblox
4. Understand that no legitimate site will give free Robux just for clicking a link

One last thing

I’m grateful that my son listened and responded quickly, but not every child might know what to do in the same situation. Let this be your reminder to prepare them.

Hackers don’t just go after adults. They target anyone with digital assets, including our children.

So please, check your child’s Roblox account security settings today. You might save them from losing more than just virtual currency.