TL;DR: Your kid’s digital identity is the new playground currency. If someone—even a "friend"—asks for a password, a "verification code," or their home address in exchange for Robux or a rare Fortnite skin, it’s a scam. 100% of the time. Stop the "Ohio" behavior before it starts by enabling Two-Factor Authentication (2FA) and teaching your kids that "Free" is the biggest red flag in the history of the internet.
Learn how to set up Roblox parental controls
Check out our guide on Discord safety for parents
Ask our chatbot about the latest Roblox scams
We’ve all been there. You’re finally sitting down with a coffee, and your kid runs in looking like they just saw a ghost—or worse, like they just lost their level 500 Adopt Me! pet.
Usually, the story goes like this: "Someone said they’d give me free Robux if I just gave them the code that texted to your phone," or "A developer wanted to give me a special badge, so I had to tell them my password."
In the adult world, we call this "phishing" or "social engineering." In your kid’s world, it’s just a massive bummer that feels like the end of the universe. These digital pickpockets aren't always hooded hackers in dark rooms; sometimes they’re 12-year-olds in another state who have learned that "borrowing" accounts is easier than earning items.
For a kid, their Roblox or Minecraft account isn't just a game; it's their social status, their creative portfolio, and—if they’ve been "entrepreneurial" with their allowance—a significant financial investment.
When a stranger (or a "friend" they met five minutes ago) asks for personal info, they aren't just looking for an address. They are looking for the keys to the kingdom.
According to recent community data, over 45% of middle schoolers have encountered someone asking for a password or personal detail online. This isn't a "maybe" situation; it's a "when" situation.
Scammers are smart. They don't usually lead with "Give me your credit card number." That’s too "boomer" for today’s kids. Instead, they use bait that appeals to a kid’s desire for status or "free" stuff.
1. The "Free Robux" Generator
If you see your kid watching a YouTube video promising "Unlimited Robux" by clicking a link in the description, intervene immediately. These links lead to "verification" sites that ask for login credentials or, worse, download malware to your device.
2. The "Fake Friend" on Discord
Discord is the hub of gaming culture, but it’s also the Wild West. A common tactic is for someone to DM your kid saying, "Hey, I accidentally reported your account, you need to talk to this 'Discord Moderator' to fix it." The "moderator" then asks for a login code. Discord will never DM your kid to ask for a code.
3. The "Verification" Scam
This is the one that gets them. A scammer tells the kid they’ve won a giveaway but need to "verify" they are a real person by providing the 6-digit code sent to their parent’s email or phone. That code is actually the Two-Factor Authentication code the scammer needs to change the account password and lock your kid out forever.
Roblox is the #1 place where these interactions happen. With nearly 70% of kids aged 9-12 playing regularly, it’s a massive target. The platform has built-in filters to block phone numbers and addresses, but kids are creative. They’ll type "A-D-D-R-E-S-S" or use external apps like Snapchat to bypass safety filters.
If your kid is into Fortnite or Valorant, they’re likely on Discord. This app is where the "social" part of social engineering happens. It’s much easier to manipulate a kid in a private DM than in a public game chat.
Scammers use TikTok to promote "glitches" or "hacks." They’ll post a video of a kid getting thousands of followers or in-game currency, telling viewers to "Check the link in my bio." That link is almost always a data-harvesting trap.
Ages 6-9: The "Stranger Danger" Update
At this age, the concept of "personal information" is still a bit fuzzy. They might not realize that telling someone their school name or their dog's name (often a password hint!) is a bad idea.
- The Rule: If anyone asks a question that isn't about the game, stop playing and tell a parent.
- The Tech: Use Messenger Kids if they want to talk to friends, as it gives you total control over who they chat with.
Ages 10-13: The "Verification" Era
This is the danger zone. They want independence and they really want that "Skibidi Toilet" skin or whatever the current trend is.
- The Rule: Never share a code. Not with a friend, not with a "developer," not with anyone. Codes are for parents only.
- The Tech: Enable 2FA on everything, but have the codes sent to your phone, not theirs.
Ages 14+: The "Privacy" Conversation
Teens are more likely to be targeted for actual identity theft or "sextortion" (where someone asks for a photo and then threatens to leak it).
You don't need to give a lecture. In fact, if you start a sentence with "When I was your age..." they will tune you out faster than a YouTube Shorts ad.
Try this: "Hey, I saw a thing about people stealing Roblox accounts by pretending to be developers. Have you seen any of those 'Free Robux' videos lately? They're actually just digital pickpockets trying to get your login. If anyone ever asks you for a code or a password, even if they say they're from the game, they're lying. Let me know if it happens so we can report them and keep your account safe."
Why this works:
- It’s collaborative: You’re protecting their hard-earned stuff.
- It’s factual: You aren't judging them for wanting Robux; you're warning them about the "Ohio" (weird/bad) people trying to take it.
- It’s solution-oriented: You're the ally, not the police.
If you see these things on your kid's screen, it's time for a "check-in":
- The "Urgency" Tactic: "I need the code in the next 2 minutes or your account gets deleted!"
- The "Secret" Tactic: "Don't tell your parents, they won't understand how this glitch works."
- The "Off-Platform" Tactic: "Hey, let's move this chat to Snapchat or Discord where the game filters won't block us."
Digital pickpockets rely on one thing: kids being kids. They count on curiosity, impulsivity, and the desire to fit in. You don't need to ban Roblox or Fortnite to keep them safe. You just need to be the "knowledgeable friend" who helps them spot the scam before they click.
Teach them that in the digital world, if something seems too good to be true, it’s probably a scam. And if someone asks for a 6-digit code? That’s an immediate "block and report."
- Audit the Apps: Sit down with your kid and look at the privacy settings on Roblox and Discord.
- Enable 2FA: If an app offers Two-Factor Authentication, turn it on. It is the single most effective way to prevent account theft.
- The "Code" Rule: Make it a family rule that no digital codes are shared without talking to you first.
- Stay Informed: Use Screenwise to see what apps your kid’s peer group is using. If everyone in 6th grade is suddenly on a new app, that’s where the scammers will head next.
Ask our chatbot for a 5-minute security audit for your kid's phone