Hello, I recently had my account hacked.
In the short 30 minutes it took to recover my account, my group ownership was changed to a ghost account owned by the hacker. Afterward, the robux in my group were paid out to multiple personal accounts through the hacker, causing me to lose a significant amount of robux.
The hacker used Discord’s authentication process to get me to log into the hacking site, and then remotely logged into my account and immediately changed the secondary authenticator to his own. It didn’t take long for me to contact support and get my account back, but it is too hard to recover the groups that had already been transferred and the lost robux.
Once the case was resolved, I tested the transfer of group ownership and found that the groups were transferred without any process.
I think it would be great if Roblox could add a feature to increase the security level to prevent such cases. Here are a few ideas I had.
- Instead of transferring a group immediately after applying to transfer ownership, give a 2-3 day pending period. (during which the existing owner can cancel the transfer)
- When applying for the transfer of group ownership, the application should be received after authenticating the linked mail or SMS.
- Group ownership cannot be transferred to an account less than 7 days after it was created.
Thank you for reading this!