The great Roblox scam: The YouTube link that steals children's money

A Guardian investigation reveals a massive phishing scam targeting children playing Roblox. Scammers purchase fraud kits from the darknet, create fake login pages, and distribute links in YouTube, TikTok, and Discord comments. Children are invited to receive free 'Robux' currency, but clicking the link leads to theft of account details and virtual currency. Researchers identified about 200 network addresses selling fake pages within a week. Roblox stated it is not obligated to restore hacked accounts.

An investigation by the British newspaper 'The Guardian' reveals a widespread phishing scam targeting children playing the popular online game Roblox. The scammers purchase ready-made fraud kits from the darknet, using them to create fake login pages that look identical to the legitimate Roblox site. The links to the scam sites are planted in comments on YouTube and TikTok videos, or on the gamer chat app Discord. The messages offer free 'Robux' currency to players who click the link, adding an element of urgency to encourage quick action. When the child reaches the fake site, they are asked to enter a username and password, and sometimes two-factor authentication codes. Gerald Kasulis from NordVPN explained that the fake site redirects the child to a legitimate Roblox page, but the criminals already have the details to take over the account. Cybersecurity researchers identified about 200 network addresses selling fake login pages within seven days. Roblox stated that it is not obligated to assist people whose accounts have been hacked, unless required by law.