Incident Details & Context
My friend thirdsteepmaster and I have been running a geopolitical Roblox project together for over six months. The holder of our main group, State of Israel, was an alternate account owned by him: Holder Account Link.
On Saturday, August 8, 2026 (2026-08-07T22:00:00Z), we noticed our group was locked. Upon checking, my friend discovered that the holder alternate account was terminated alongside 4 of his other alt accounts.
Evidence of Unauthorized Activity:
When logging in to review the termination notice, we saw the following moderation message citing “Sexual Content”:
The flagged asset was named “Anime Force Simulator”. However, this account has never manually uploaded any places or assets. Using a Discord bot to query the Place ID, we confirmed that this game was created on the exact same day as the ban (August 8, 2026):
A second moderation review notice was also issued for another asset named “Classic Mage”, which was also uploaded on August 8 without authorization:
Absence of Unauthorized Logins:
2FA was enabled on the account, so we immediately checked the associated email security records to inspect login logs:
The email history proves that zero login attempts or 2FA prompts occurred on August 8. The only logged request was on August 9, sent when my friend himself logged in to check the status after discovering the ban. This indicates us the assets were published remotely via a stolen session cookie (.ROBLOSECURITY) or an Open Cloud API exploit without manual account access even tho we never shared any of those. We tried to appeal but got rejected.
This shows that one of his accounts were banned due to being linked to this account.
Any assistance from you guys would be highly appreciated. Since we are currently on an appeal cooldown and Roblox Support responses can be difficult to navigate, we want to make sure we handle this correctly.