Roblox Account Hacked? What to Do First

A stolen login can put your Robux and items on the line

Your password stops working. Your account email changes without your permission. Suddenly, the Roblox account you have spent time and money on may be in someone else’s hands. If you suspect your account has been hacked, act quickly: secure your device, recover access through Roblox, and remove other logged-in sessions.

Our Roblox free-Robux scam warning explains how fake giveaways steal login details. This guide covers what to do afterward. An individual account takeover does not, by itself, establish a breach of the Roblox platform.

Keep your next gaming session yours

Get player safety guides, gaming news, and stories from the people behind the games.

1. Check your device before changing passwords

Roblox’s recovery guidance starts with removing malware and unsafe downloads or browser extensions. If you installed something suspicious, run a full malware scan, restart, and scan again. Recover from a trusted, clean device; an infected one could expose your new password too.

2. Use the official account recovery page

Open the official account recovery page yourself. Use the email address attached to your account, or the phone option if you linked a number. Check your spam folder if the reset email does not arrive.

Choose a new, unique password. If you never added an email or phone number, Roblox says the self-service reset cannot work; contact Roblox Support instead. Do the same if someone changed your recovery details and you cannot regain access.

3. Sign out the other sessions

Once you are back in, open Settings → Security → Where you’re logged in. Review the devices and activity, then select Log Out of All Other Sessions. This leaves your current session signed in. Locations are approximate, and older sessions can appear as “Unknown”; that label alone does not prove an intruder is present.

4. Locked out? Give support evidence of ownership

Contact Roblox Support using the first email added to the account or the billing email used for its first payment, if available. Roblox says these can help even after an attacker changes the account email. Explain what changed and when. Ownership checks still apply, and recovery is not guaranteed.

5. Secure the account you get back

Check that the account email belongs to you or a parent. Enable two-step verification under Settings → Security, and save backup codes somewhere private. Roblox requires a verified email to enable two-step verification and warns that insufficient backup methods can prevent recovery if you lose your main verification method.

For stronger protection against fake login pages, Enhanced Protection uses passkeys or supported security keys for verification challenges. Set up its recovery requirements before enabling it.

Missing Robux or items? Do not wait

There is a time limit to know: Roblox says players seeking help after a compromise must contact support within 30 days. It does not guarantee that lost Robux or items will be restored. Inventory assistance is available only in very limited circumstances. Reporting promptly gives support the opportunity to assess your case; it does not guarantee reimbursement.

Do not let the recovery become another scam

Keep passwords, verification codes, backup codes, and browser cookies private. Roblox says its employees will never ask for that information. Do not send it to someone claiming they can recover your account. Fake support is also a recurring tactic in scams targeting Steam and Discord users.

Related Reading

Roblox Free Robux Scam Targets Players With Fake Login Pages

Steam Account Stolen? What To Do First