2-Step Verification Appears After Every Single DevProduct Purchase Attempt 🥀💔

Every time I try to purchase a DevProduct in a Roblox game, I am prompted with 2-step verification — not once per session, but literally every single time. It doesn’t matter if I verified 30 seconds ago; the prompt returns like clockwork.

Due to Roblox being blocked in Türkiye, I’m forced to use a VPN just to access the platform. But when connected via VPN (especially to countries like the US), the system seems to assume every microtransaction is suspicious. I haven’t experienced this issue when connected to closer VPN endpoints, such as the Netherlands or Romania. So the problem appears to be both VPN- and location-sensitive.

Steps to Reproduce (with a sprinkle of unfortunate realism):

  1. Live in Türkiye, where access to Roblox is blocked because… reasons. :broken_heart::skull_and_crossbones::pray:
  2. Use a VPN to connect to any country where Roblox is accessible — preferably somewhere far away like the US…
  3. Launch a Roblox experience that contains DevProduct purchases.
  4. Attempt to buy a DevProduct.
  5. Complete the 2-step verification.
  6. Attempt to buy another DevProduct.
  7. Face another 2-step verification.
  8. Repeat until you start questioning your life choices or run out of verification codes. :low_battery:

Expected behavior

I should only be prompted for 2-step verification once per session — or at worst, once per login. Not every time I try to support a developer with a few Robux.

It’s almost as if Roblox doesn’t really want me to spend money. Perhaps this is a subtle feature, not a bug. :money_mouth_face::dollar:

A private message is associated with this bug report

1 Like

Thank you for the detailed bug report!

We’ve fixed the bug! Everything should be running properly now. Are you encountering any more difficulties?

1 Like

I bought the same dev product multiple times under the same conditions, and 2-step verification didn’t show up after each purchase — it only got triggered once after many tries, which I guess is fine. :mending_heart: