On March 29, 2026, my account was compromised through a phishing link (or an extension). The attacker:
Changed my email and date of birth to under 13
Added parental controls using their alt as the linked “parent”
Drained Robux from my group and spent them on multiple gamepasses they own
I can still log in (I am posting from the account right now), but the parental lock prevents me from changing my password, enabling 2FA, or restoring my email.
The birthday change to under 13 appears to have triggered COPPA data deletion, which wiped my original email from the system. This is likely why support keeps saying they cannot verify ownership.
This is a loophole where attackers use Roblox’s own child safety systems to make account recovery impossible. Birthday change deletes verification data, parental controls block all security changes, and support cannot help because the data they need was automatically deleted.
I have submitted two tickets (165349354 and 165422861) with extensive proof including original emails, DOB, creation date, previous username, phone number, and billing receipts. Both were denied with the generic “unable to verify ownership” response.
If any staff member can review my case, I would greatly appreciate it.
Something strange with the support help when we submit a ticket. It seems like only bots/AI reply to the email instead of real humans. They only mention someone’s name but all the sentences and emails replied seem like automatic replies. Yes, maybe there are real human staff who can read this post and take appropriate action.
Update: The hacker never changed my password, so I was still able to log in. From there I was able to add my own parent account, which let me:
Change my email back to my original one
Change my password
Enable 2FA via authenticator app
Add my phone number
Change my age back and re-verify
I believe my account is now secured and the hacker can no longer access it. However, the hacker’s alt account is still linked as a parent on my account. I have no way to remove it myself. I need a Roblox staff member to unlink their alt from my account.
Consider continuing of contacting Support about the situation. You have mostly recovered your account, therefore you should have a better chance of fixing the situation. Be sure to not give up easily as Support is lack luster at first but after a continue conversation, progress should hopefully be happening soon.
I’ve been creating many support tickets for the past 4-5 days and every single one gets denied saying they are unable to verify me, even though I have provided a lot of proof. Even supervisors have looked at it and denied it and they are not telling me what I should be providing either. I have full access to the account with 2FA enabled but all I need is for the hacker’s alt (username: 4scmc) to be removed from parental controls.
I hope you’ve removed any and all passkeys off your account and re-added your own, too.
If the hacker had a passkey, they could skip Username, Password, and 2FA all in one jump, unless you delete it. (The only thing blocking this big jump into log in is the popup asking you which games youve played in the last 7 days, which I despise because I had to change a password due to that. (even though I have a literal security key, physically and biometrically verifying its me)