A new phishing scam is actively targeting users of the online gaming platform Roblox, with a significant number of victims being children. The scam aims to steal in-game currency, known as Robux, and personal login details from players. Robux can be earned in-game or purchased, with packages costing up to £199.99.
Fraudsters create fake login pages that are visually identical to the legitimate Roblox website, often using ready-made kits purchased from the dark web. Users are lured to these fake sites through links posted on platforms like YouTube, TikTok, and Discord, frequently under the guise of offering free Robux. Upon entering their credentials, including username, password, and sometimes two-factor authentication codes, victims are then redirected to the actual Roblox site, making the compromise less immediately apparent.
Once criminals obtain login details, they can access the user's account to steal Robux, which are used to purchase virtual items like avatar skins and animations. The theft of personal data also poses a risk to the affected individuals. NordVPN researchers found nearly 200 addresses selling phishing page tools targeting Roblox users over a seven-day period, indicating the scale of the operation.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's briefNew every morning, and the back catalogue is archived by date.
Cybersecurity researchers from NordVPN identified a phishing scam targeting Roblox users, many of whom are children, to steal Robux and personal data. Fraudsters use fake login pages, often promoted via social media, to trick users into divulging credentials.