- 01What Roblox really is — and why that matters
- 02The risks: what happens on Roblox
- 03What the Hindenburg Report 2024 revealed
- 04Arrests: 30+ cases since 2018
- 05Group 764 — classified as a terrorist threat by the FBI
- 06What Roblox knows about your child
- 07The business model: why children are the target audience
- 08The wave of lawsuits: 115 cases before US federal court
- 09What Roblox has done — and why it isn't enough
- 10How children bypass safety measures
- 11Alternatives: Minecraft and Fortnite compared
What Roblox really is — and why that matters
Roblox looks like a children's game. Colourful avatars, simple graphics, cheerful music. And it isn't a single game — it's an open platform where anyone can create game worlds. More than 50 million such experiences exist. Around 7 million of them are active on any given day.
That is precisely the problem. While a console game has fixed content that you can review once, on Roblox any user worldwide can create content — including adults with bad intentions. Roblox is not a game you check once. It is an open social network with game mechanics.
The risks: what happens on Roblox
Grooming and sexual exploitation are the most serious risks. Perpetrators use child-friendly avatars, give away Robux (the in-game currency) and deliberately build trust. They then move conversations to Discord, Snapchat or WhatsApp — where Roblox can no longer monitor them. Guides on how to bypass chat filters and contact children outside the platform circulate on the dark webDark WebA hidden part of the internet accessible only via special software (e.g. the Tor browser). Frequently used for illegal activities..
The numbers speak for themselves: reports from Roblox to the US National Center for Missing & Exploited Children rose from 675 in 2019 to 24,522 in 2024. That is a fortyfold increase in five years.
Political extremism is also documented. The Global Network on Extremism and Technology (GNET) found neo-Nazi groups, Holocaust denial and extremist recruitment in October 2025 — including groups modelled on the Atomwaffen Division. Cases have been documented in which 12-year-old boys were drawn via WWII Roblox games onto Discord servers carrying neo-Nazi propaganda.
Financial harm through Robux is often the first thing parents notice. The currency is deliberately opaque — 80 Robux equate to roughly £1, but in-game you only see Robux figures. Parents sometimes discover credit card charges of hundreds of pounds made by their child without their knowledge. Worse still: a class action (2024) alleged that Roblox had collaborated with casino websites on which children engaged in real gambling with Robux.
What the Hindenburg Report 2024 revealed
In October 2024 the well-known short-seller Hindenburg Research published a damning report. Their researchers created a test account for a "child under 13" and found 38 groups containing child sexual abuse material within a very short time. Over 900 user accounts carried variations of the name "Jeffrey Epstein", including explicitly paedophilic designations.
The Roblox share price fell by up to 9% on the day of publication. Roblox rejected the allegations — but subsequently introduced new parental controls. The US Securities and Exchange Commission (SEC) shortly afterwards confirmed an ongoing investigation into the company.
Arrests: 30+ cases since 2018
Group 764 — classified as a terrorist threat by the FBI
Particular attention must be paid to the group "764", founded in 2021 by a then 15-year-old from Texas. The FBI classifies it as a "Tier One" threat — the highest danger level. Canada has already designated 764 a terrorist organisation.
764 and its offshoots (CVLT, Harm Nation and others) deliberately recruit on Roblox and Minecraft. Their method: children are approached via gaming platforms, drawn onto Discord, and systematically subjected to sexual, physical and psychological abuse. Victims are coerced into self-harm and into producing abuse material.
What Roblox knows about your child
Roblox collects username, date of birth, geolocation (IP address), purchase history, gameplay behaviour and device data. Since January 2026, biometric facial dataBiometricUnique physical characteristics such as facial geometry or voice that identify you individually. Particularly sensitive for children, because you cannot change your face. for age verification has been added. Roblox chats are not encrypted — the company reads over 6 billion messages every day. What is intended for safety also means: no communication on the platform is private.
In June 2025 login credentials for over 71,000 Roblox accounts surfaced on dark-web forums. The face-based age verification mandatory since January 2026 (via third-party provider Persona) analyses facial geometry, skin texture and bone structure. Privacy advocates such as the Electronic Frontier Foundation warn of the normalisation of biometric surveillance of children.
The business model: why children are the target audience
Roblox generated revenue of $4.89 billion USD in fiscal year 2025 (+36% year-on-year) — almost entirely through the virtual currency Robux. Parents buy Robux with real money (approx. 80 Robux per £1); children spend them on avatar clothing, game access and cosmetic items. The conversion rate is deliberately obscured — in-game you only see numbers, never a pound amount.
Developers who create games on Roblox can convert Robux into real money via the DevExDevExDeveloper Exchange — Roblox's programme allowing game developers to convert their earned Robux into real money. Roblox retains around 70% in the process. programme — but Roblox retains around 70% of the value. Despite billions in revenue, Roblox posts an annual loss of over one billion dollars under GAAPGAAPGenerally Accepted Accounting Principles — the US accounting standards. If a company reports a loss under GAAP, that is the official, audited loss. standards. A lawsuit (2024) alleged that Roblox had collaborated with casino websites (RBXFlip, Bloxflip) at which children gambled with Robux for real money — with Roblox collecting 30% fees per transaction.
The wave of lawsuits: 115 cases before US federal court
On 12 December 2025 the US Judicial Panel on Multidistrict Litigation consolidated 115 federal lawsuits into MDLMDLMultidistrict Litigation — a US procedure in which many similar lawsuits from different states are consolidated before a single court. Illustrates the scale of the problem. No. 3166 before Chief Judge Richard Seeborg at the Northern District of California. Defendants include not only Roblox but also Discord, Snap and Meta.
The most significant state lawsuits: Louisiana (August 2025) — the first state lawsuit, calling Roblox "the perfect place for paedophiles". Kentucky (October 2025) — documented links to the terrorist group 764. Texas (November 2025) — Attorney General Ken Paxton described Roblox as a "breeding ground for predators". Florida (December 2025) — investigators created test accounts for children aged 7, 8, 10 and 15; all were able to access inappropriate content without verification. Tennessee — compared Roblox to "the digital equivalent of a creepy van at the edge of a playground". Los Angeles County (February 2026) — seeking civil penalties of up to $2,500 per day per violation.
Internationally: the Dutch ACM investigated Roblox from January 2026 under the EU Digital Services ActDSAThe EU's Digital Services Act (in force since 2024). Obliges large platforms such as Roblox to protect minors, ensure transparency and combat illegal content.. Australia threatened fines of up to AUD 49.5 million. The SECSECSecurities and Exchange Commission — the US stock-market regulator. When the SEC investigates, it concerns potential violations of securities law, e.g. false statements to investors. confirmed an ongoing enforcement investigation into Roblox, and the FTCFTCFederal Trade Commission — the US consumer-protection agency. It can sue companies that violate data protection or consumer rights — especially regarding children's data. disclosed 9,237 pages of documents.
What Roblox has done — and why it isn't enough
Since late 2024 Roblox has introduced over 145 safety improvements. The Family Centre allows parents to manage content maturity, screen time, spending limits and contacts. For children under 9, chat has since January 2026 been possible only with explicit parental consent. The Sentinel AI systemSentinel AIRoblox's proprietary AI monitoring system, which automatically scans billions of chat messages for grooming patterns, harassment and other dangers. analyses over 6 billion messages per day for grooming patterns — in the first half of 2025 it proactively identified 35% of all child-safety cases.
The criticism: all of this came years too late. And Roblox cut spending on Trust & Safety by 2% in 2024, citing "AI efficiency". The company employs only 0.77 moderators per 100,000 users — less than half the industry average. A former senior product designer told Hindenburg Research: "Restricting engagement hurts metrics — in many cases leadership doesn't want that."
How children bypass safety measures
Alternatives: Minecraft and Fortnite compared
Yes — Minecraft is significantly safer. In single-player or private Realms mode, Minecraft can be played completely offline with no contact with strangers. Common Sense Media recommends Minecraft from age 8, whereas Roblox is not recommended until age 13. Minecraft costs a one-off fee of around £25 with no purchase pressure, collects minimal data in single-player mode, and has no social platform with 150 million users in the background.
Fortnite (PEGIPEGIPan European Game Information — Europe's age-rating system for games. PEGI 12+ means: recommended from age 12. The rating is not legally binding. 12+) offers, as a curated standalone game, a more controllable environment than Roblox. All purchases are purely cosmetic with no gameplay advantage. While its monetisation does use FOMOFOMOFear Of Missing Out — the anxiety of missing something. Games exploit this deliberately: time-limited offers, seasonal items, expiring passes — all designed to make children buy immediately. tactics (seasonal Battle Passes), it is more transparent than the layered Robux system. In 2024 the Dutch ACM imposed a fine of €1.1 million on Epic Games (Fortnite) for pressuring children into purchases — significantly less severe than the allegations against Roblox.
The expert consensus is clear: Minecraft (single-player/private) is the safest option, followed by Fortnite, with Roblox last — due to its open UGCUGCUser-Generated Content. On Roblox, anyone can create games and worlds. This makes the platform creative, but also uncontrollable. structure, aggressive monetisation and social features.
For children under 13, Minecraft in single-player or private mode is the clearly preferable alternative.