Parents beware — Roblox scammers are stealing logs and passwords like never before, here's what to look out for
NordVPN counted 196 Roblox phishing sites in one week, some built to grab 2FA codes in real time.
Parents should be cautious as Roblox scammers are stealing login credentials and passwords at an alarming rate, according to NordVPN's recent findings. In just one week in July 2026, the company detected 196 active phishing addresses dedicated to Roblox. These scammers offer pre-made phishing pages, disguised links, and even tools to verify if stolen login information is still functional.
Scammers have found a ready-made market for these services, selling cloned Roblox pages and disguised links. Some phishing pages request more than just a password, asking for two-factor authentication codes, backup codes, and account PINs to gain unauthorized access to accounts. The scammers can pay for these turnkey solutions using untraceable cryptocurrencies.
The supply chain for these scams is extensive, with one service offering ready-made phishing pages, backup sites, and disguised links from a single storefront. This service claims to have processed over six million stolen login records, including usernames, passwords, and more. The service also displays a counter showing over 239,000 registered users, indicating the lucrative nature of this market.
NordVPN CTO Marijus Briedis stated that these scams can now be created and deployed by almost anyone, highlighting the ease with which cybercriminals can launch these phishing campaigns. The scammers use similar-looking web addresses, often with country code top-level domains from Uganda, Paraguay, and Kazakhstan, to trick users into visiting their fraudulent sites.
To avoid falling victim to these scams, Roblox has implemented Enhanced Protection, requiring two-factor authentication through hardware security keys or mobile passkeys. However, relying solely on these measures is not enough, as many of these scams begin on Discord servers, YouTube, and TikTok links, often promising free Robux. Roblox users should be wary of suspicious downloads, browser extensions, and be cautious when resetting their passwords.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
