Roblox Account Hacked? Here’s Exactly What to Do (2026 Recovery Guide)

If you’re reading this, your kid has just told you their Roblox account got hacked — items are missing, the password doesn’t work, or someone is messaging from their account. The good news: most hacked Roblox accounts can be recovered, often within 24-48 hours. The better news: if you act fast and follow the right steps, you can get most stolen items back, too.

This guide walks through exactly what to do, in order. It also explains how Roblox accounts get hacked in the first place, so you can stop it from happening again.

First — Stay Calm, Move Fast

Your kid is probably upset. Years of items, hard-earned Robux, customized avatar — it can feel like losing a savings account. Take a breath. Almost every step here is reversible if you get to it within a week or two. After that, recovery gets harder.

Two ground rules:

1. Don’t pay anyone. Random Discord users, “Roblox recovery experts,” and any service that promises to get the account back for a fee are scams. Roblox account recovery is free and only goes through Roblox itself.
2. Don’t blame your kid. They probably feel awful already. They almost certainly clicked a “free Robux” link or shared their password with a “friend.” Lecturing them will end the conversation. You can talk about prevention later — first, recover.

Step 1: Try to Log In and Change the Password

Sometimes a “hack” is your kid being signed out by a glitch. Try the obvious first.

1. Go to roblox.com/login
2. Enter the username and current password
3. If it works — great. Immediately go to Settings → Security → Change Password

Use a brand new password (not used on any other site). 12+ characters, mix of letters, numbers, and symbols. Write it down somewhere your kid can find it but a sibling can’t.

If the password doesn’t work, move to Step 2.

Step 2: Use “Forgot Password” If You Have Email or Phone Access

Roblox accounts can be recovered through email or phone if either is verified on the account.

1. On the Roblox login page, click Forgot Password or Username?
2. Enter the email address linked to the account
3. Check email for the reset link
4. Click it, set a new password

If your kid added a phone number to the account, you can use that instead of email.

If both the email and password were changed by the hacker, the reset link will go to their email, not yours. Move to Step 3.

Step 3: Submit a Support Ticket to Roblox

If you’ve lost email access too, you need Roblox Support.

1. Go to roblox.com/support
2. Click Submit a request (you don’t need to be logged in)
3. Fill out the form:

• Category: Account → Compromised/Hacked Account
• Username: the hacked account’s username (exactly as it appears in-game)
• Email: the original email if you remember it; if not, your current email
• Description: explain the situation. Mention any recent activity (date of last successful login, items missing, suspicious purchases)

Specifically include:

• Approximate date the account was hacked
• Last known password (don’t worry, they’ll only ask for it through secure channels)
• Original email or phone number on the account
• Any payment methods used (helps prove ownership)
• Roblox Premium subscription history if applicable
• Your relationship to the account (e.g., “I’m the parent of the account owner, who is 9”)

The more detail, the better. Roblox Support gets thousands of these tickets — you want yours to be the easiest one to resolve.

Response Time

Roblox Support typically responds within 24-72 hours. During holidays or major hacking events, it can be longer. They will email back asking for proof of ownership — be ready to provide:

• Screenshots of past purchase receipts
• Old Roblox emails confirming purchases or status changes
• Credit card statements showing Roblox charges
• Anything that links you to the account historically

Once they verify ownership, they’ll reset the email and password and send you new credentials.

Step 4: Check for Unauthorized Charges

While waiting for Roblox to respond, check your payment methods.

1. Apple/Google subscriptions — apps.apple.com/account or play.google.com/store/account/subscriptions. Cancel any recurring Roblox Premium charges if your kid didn’t sign up.
2. Credit card statements — flag any Roblox charges you didn’t authorize. If your kid is under 13 and the charges happened after they were under 13, you have strong consumer-protection grounds to dispute them.
3. Linked PayPal or other accounts — same thing.

Most card issuers will reverse unauthorized charges, especially for kids’ accounts. Call the number on the back of the card and ask for a chargeback.

Step 5: Recover Stolen Items

Once Roblox returns the account, items are usually still gone. Here’s how to get them back.

Check the Trade History

In the recovered account, go to Profile → Trade History. If items were stolen via a trade scam, you’ll see the trades. Take screenshots.

File a Theft Report

1. Go to roblox.com/support again
2. Submit a separate ticket: Item recovery / Theft
3. Include:

• Trade or transaction details from the history
• Username of the recipient (the thief’s account)
• Item names and approximate values
• Confirmation that the account was hacked when the trade happened

Roblox can reverse trades and return items if reported within a reasonable window (typically 30 days). They will sometimes also ban the recipient account.

Robux

Stolen Robux are harder. If the thief spent the Robux on items the original account still has, those items can stay. If the Robux were sold to another account or spent on consumables, recovery is unlikely. Roblox sometimes restores Robux as a one-time courtesy on first hacks — ask in your support ticket.

Step 6: Lock the Account Down

Once you have the account back, make sure this never happens again.

Change All Three Things

1. New password — never used on any other site
2. New email — Gmail with its own strong password
3. Phone number — verified, ideally yours, not the kid’s

Turn On 2-Step Verification

Settings → Security → Two-Step Verification:

• Email — works but weakest (if they get the email, they get the account)
• Authenticator — strongest (Google Authenticator, Authy, etc.)
• Security key — for advanced users; physical USB key

For most families, email 2FA is fine. If your kid has expensive items or a lot of Robux, use authenticator app.

Set the Account PIN

Settings → Security → Account PIN. A 4-digit code that you keep secret. This locks privacy and chat settings so your kid can’t disable them on a phishing site.

Review Devices and Sessions

Settings → Security → Logout of All Other Sessions. This kicks the hacker out of any device they were still on.

Disconnect Suspicious Linked Accounts

Settings → Account Info → check linked accounts (Xbox, PlayStation, Discord). Remove anything that wasn’t there before.

For the full lockdown walkthrough: Roblox parental controls setup guide.

How Did This Happen? (The Honest Answer)

Roblox accounts almost never get “hacked” in the technical sense. Roblox itself isn’t broken into. Almost every compromised account got that way through one of three patterns:

1. Phishing Sites

Your kid clicked a link promising “free Robux” or “Robux generator” and entered their Roblox username and password. The site captures the credentials and the hacker logs in.

These links circulate constantly — in YouTube comments, Discord servers, in-game ads, and TikTok comments. They look real because they’re designed to.

The rule for kids: If a site asks for your Roblox password and isn’t roblox.com, it’s a scam. Always.

2. Shared Passwords

Your kid shared their password with a “friend” — a sibling, a school friend, a Roblox friend they don’t actually know. The friendship goes south, the friend logs in and steals.

The rule for kids: Passwords are never, ever shared. Not with best friends. Not with cousins. Not with Roblox friends. Never.

3. Reused Passwords

Your kid uses the same password on Roblox as on a game site or forum that got breached. Their email/password combo ends up on a leaked list, and someone tries it on Roblox.

The rule for everyone: Roblox needs its own unique password.

For more on the predator and scam landscape: Common Roblox scams (and how to protect your kid) and Roblox predators: how to protect your kids.

What to Tell Your Kid Afterward

This is a teachable moment. Without lecturing, cover three things:

“Was there a link or a friend?” Find out how it happened so it doesn’t happen again. Don’t make them feel stupid for it. Hackers are professionals — they trick adults too.

“From now on, no one ever needs your password. Not Roblox. Not me. Not your friend. No one.” This is the rule for life, not just Roblox.

“If anything looks wrong, come to me first. I won’t be mad.” The biggest reason kids don’t tell parents about hacks is they’re worried about losing the game. Take that fear off the table.

You can also use this to set up a family password manager (1Password, Bitwarden, Apple Passwords). Strong unique passwords for every account, written down once and forgotten. Best safeguard there is.

What Doesn’t Work

A few things parents try that don’t help:

• Posting on Roblox forums — the actual recovery only happens through Support tickets
• Tweeting at Roblox — they don’t handle individual accounts on social media
• Buying back the items — the thief’s account often gets banned, and the items can’t be re-traded back
• “Account recovery services” — these are scams. There is no such thing as a legitimate paid recovery service for Roblox

Prevention Checklist

Once recovery is done, run this checklist on every account in your family:

• Unique password (not used anywhere else)
• 2-Step Verification on (authenticator preferred)
• Email and phone verified, both controlled by parent
• Account PIN set
• Privacy settings locked to Friends or No one
• No linked third-party accounts that aren’t recognized
• Auto-pay disabled if your kid doesn’t have spending approval

If all of those are true, the account is in the top 5% of secure Roblox accounts. Most hacks happen to accounts that have none of them.

FAQ

How long does Roblox take to respond to a hacked account ticket?

Usually 24-72 hours. During major hacking waves or holidays, it can stretch to a week. Don’t submit duplicate tickets — that pushes you to the back of the queue.

Can I get my Robux back?

Sometimes. If the Robux were spent on items still in the recovered account, those items stay. If the Robux were spent or transferred away, recovery is harder. Always ask Roblox in your ticket — they sometimes do a one-time courtesy restore.

Should I delete the account and start over?

Almost never. Recovery is usually faster than rebuilding. Plus, account history (purchase records, age verification, item collection) all has value. Only delete as a last resort and only after Roblox confirms recovery is impossible.

My kid’s account got hacked because they used a “free Robux” generator. Are they in trouble with Roblox?

Usually not. Visiting a phishing site isn’t itself a Terms of Service violation — it’s the people who run those sites who are violating ToS. Your kid’s account might get a temporary lock as Roblox investigates, but they’re not banned for being a victim.

How can I tell if my kid’s account was actually hacked vs. they just forgot the password?

Hacked accounts usually show one or more of: changed username, changed avatar, missing items, sent messages your kid didn’t send, recent login from a strange location. If none of those are present, it’s probably a forgotten password — try the standard reset flow first.

Can the hacker keep using my kid’s email?

If they changed the recovery email to one they control, yes — until Roblox Support reverses it. That’s why submitting the ticket fast matters. Once the email is reset to one you control, the hacker is locked out for good.

Bottom Line

A hacked Roblox account feels like a disaster, but most of them recover. The order matters:

1. Try the reset flow with your email
2. Submit a Support ticket with as much detail as you can provide
3. Check for unauthorized charges and dispute if needed
4. File a theft report for stolen items
5. Lock the account down with a new password, 2FA, and an account PIN

Then have the conversation. No “free Robux” sites. No password sharing. Unique passwords for every account.

For more on keeping Roblox accounts safe long-term: Roblox privacy settings, Roblox parental controls, and common Roblox scams.

You’ll get the account back. The question is whether the next one needs to.