System Chat Exploiters

Recently a lot of our players have been noticing these bots join and send custom chat messages to join their gambling Robux website. This is a big issue because a few of our players have even fell for this scam and resulted in losing their account. I would hate for our game to turn into a botting paradise where players can fall for scams.

People also believe that BLOXDROP is sponsoring us and are more likely to fall for it. I’m posting announcements on our discord server to warn our player base but that will only reach so many players.

Please let us know if Roblox is working on a solution and if there’s anything we can do to fix this issue in the short term!

Thanks, Fudge from Frost Blade Games
Image4


Image2

Expected behavior

I expect Roblox to take action on this exploit and remove it. Even if 0.1% of our players fell for it, that’s still a massive amount of users getting scammed or tricked into gambling.

I would also like to know if there’s anything we as developers can do in the short term.

4 Likes

They seems to have some space after a hi to make the chat size.

3 Likes

this is an issue if its actually working, I suggest for now making an in game notice on join, and also make some sort of word blacklist system and adding bloxdrop to it.

This has been an issue for a long time. Roblox doesn’t properly normalize spaces, which allows you to use multiple spaces to wrap the text around simulating a newline. You don’t even need an exploit to achieve this.

The best way to solve this is by normalizing any repetitive spaces using TextChatService.OnIncomingMessage on the client:

local TextChatService = game:GetService("TextChatService")

local function OnIncomingMessage(Message: TextChatMessage)
	local Properties = Instance.new("TextChatMessageProperties")
	Properties.Text = string.gsub(Message.Text, "%s+", " ")
	
	return Properties
end

TextChatService.OnIncomingMessage = OnIncomingMessage
4 Likes

This is extremely disturbing, as I was playing a game (link) today and these scam bots were literally filling the chat. Every few minutes a random bot account joins the server, types in the chat, and instantly leaves.


This issue started happening very recently. Where is the bot detection system, Roblox? :sob::sob::folded_hands:t2:

I searched the profile of the random bot from one of the screenshots I sent, using the search bar on the website, and they’re still in-game. And judging by their badges, they’re targeting a lot of popular games:


We’re seeing these too, and the way they’re framed makes players think they are affiliated with us. Additionally, we’ve seen our session time drop recently and suspect it’s related to these bots.

image

image

Thank you for the bug report. We’ve seen accounts joining experiences to post misleading messages promoting off-platform “Robux” sites. Our bot detection system detects this type of behavior, and we’re actively improving real-time detection and action to respond faster on such abuse.

We’re also looking into adding safeguards in Experience Chat so user messages do not look like system messages due to extra spaces.

In the meantime, please continue to report abuse, and ban users as this helps our systems catch these patterns more quickly.

4 Likes

If only you could make any message with the phrase “SYSTEM: Go to” become censored.

Unfortunately your just going to wait for AI to get better instead of doing the manual work of making that phrase censored.

1 Like

It’s also important to note that you can abuse other Unicode whitespace characters to achieve similar results, notably U+00A0, U+2000-200A and U+3000.

These won’t be caught by the %s string pattern and require a special Unicode-aware regex implementation to filter properly.

1 Like

They are definitely using repetitive spaces:
hi New line
creates a new line

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.