Hello everyone!
I’d like to propose a new security feature that could help protect users from unauthorized Robux spending, and potentially reduce the impact of the Robux trading black market. While Roblox already provides strong account security tools such as two-factor authentication, there is still one area that could be improved — transactions.
The Idea
Introduce an optional, user-controlled setting that requires confirmation for every Robux transaction. This confirmation could be done through either:
- A 2FA code
- An email verification code
The setting would be fully toggleable, allowing each user to choose what best fits their needs:
- Enabled → Every purchase requires 2FA or an email code. Maximum security, ideal for users who are worried about cookie theft or unauthorized access.
- Disabled → Transactions work exactly as they do now, with no extra steps for users who prefer convenience.
Why This Is Helpful
Even with 2FA enabled, there are rare cases where attackers gain access through stolen cookies and can spend a user’s Robux without triggering authentication (this happened to me recently). Adding an extra verification layer specifically for transactions would:
- Prevent unauthorized Robux purchases
- Protect younger or less tech-savvy users
- Give users more control over their account security
- Reduce the impact of cookie-related session hijacking
- Be a significant step toward reducing the Robux black market, which would likely increase overall Roblox revenue
This feature wouldn’t affect users who choose to keep it disabled, and users who do disable it typically don’t hold large Robux balances anyway. I assume a large portion of the Robux circulating in third-party marketplaces comes from developers and games with millions of Robux — users who would likely enable this feature for added protection.
Thank you for reading! I hope this suggestion can be considered.