Account Taken? Recovery and Reporting, in the Right Order
If an account has just been taken, the order matters more than the detail. Do the first four steps now and read the rest afterwards.
Change the password from a device you trust. Turn on 2-Step Verification. Remove any email or phone number in the settings you do not recognise. Uninstall any extension or app installed in the last few days.
The first ten minutes#
- Uninstall suspicious extensions and apps first. If a token stealer is still running, a new password is stolen as soon as it is set.
- Change the password, from a device you trust, to something not used anywhere else.
- Enable 2-Step Verification, with an authenticator app if possible.
- Check the account settings for an email address, phone number or linked account you do not recognise, and remove it.
- Sign out of all other sessions if the option is available.
- Check purchases, trades and item history, and note anything unexpected — you will need this for the report.
Step one before step two is the part people get wrong. Changing the password while the extension is still installed simply hands over the new one.
If you cannot log in at all#
Use Roblox’s own account recovery flow on its website. What makes recovery possible is the verified email or phone number attached to the account before the incident; if the attacker changed it, Roblox Support is the route, and the more original account information you can supply the better.
- Use the password reset on roblox.com — never a link from an email you did not request.
- If the email was changed, contact Roblox Support through the official help site.
- Gather what you can: original email address, approximate creation date, past usernames, purchase receipts.
- Purchase receipts from the app store or card statement are strong evidence of ownership.
- Be patient with the process, and do not open multiple tickets — it slows the queue rather than speeding it.
Only Roblox can restore an account. No third party has access, which is why the entire recovery-service industry is a scam by construction.
Do not pay a recovery service#
This deserves its own section because it targets people at the worst moment. Anyone advertising Roblox account recovery for a fee — in a video, a search result, a message — cannot do it, because access to accounts sits with Roblox alone. What they can do is take a payment, and often ask for the same details the first attacker wanted.
- No third party can restore, unban or recover an account.
- Payment is usually requested in gift cards or crypto, which is itself the signal.
- Many recovery services are run by the same people who took the account.
- Someone contacting you offering to help after you posted about a hack is not a coincidence.
The rule: recovery happens through roblox.com and nowhere else, and it never costs money.
Reporting, and where it actually goes#
| What happened | Where to report |
|---|---|
| A scam site or generator | Roblox Support, and the browser’s phishing report |
| A user who scammed or harassed | In-platform report on the user or the message |
| A scam experience | In-platform report from inside the experience |
| Unauthorised purchases | The store that processed them — app store, card issuer or Roblox |
| Fraud involving real money | Your bank, and your national consumer or cybercrime body |
| A phishing email | Report as phishing in the mail client, then delete |
In-platform reports are the ones that reach moderation. A post on social media reaches other victims, which has its own value, but it does not action anything.
About the Robux and items#
Be prepared for the honest answer: stolen Robux and items are frequently not restored. Roblox’s policies limit what can be reversed, and the more time that passes the less recoverable anything is — which is another reason the first ten minutes matter so much.
- Report as soon as possible; delay reduces what can be done.
- Keep evidence: screenshots, dates, usernames, transaction records.
- Unauthorised card payments are a separate route through the bank or the app store.
- A restored account does not automatically mean restored items.
- Once secure, review how it happened — it is almost always one of the seven mechanisms in our scams guide.
That last step is not a lecture. Accounts that are recovered and not reviewed are frequently taken a second time by the same route.
Frequently asked questions
What do I do if my Roblox account was hacked?
In this order: uninstall any recently installed extension or app first, because a token stealer will capture the new password too; change the password from a device you trust; enable Two-Step Verification; remove any email address or phone number in the settings you do not recognise; sign out of all sessions; then check purchases and trades and report to Roblox through the official help site. If you cannot log in at all, use the account recovery flow on roblox.com.
Can Roblox restore stolen Robux or items?
Sometimes, and often not — policies limit what can be reversed and the chance falls sharply with time, which is why reporting immediately matters. Keep evidence: screenshots, dates, usernames and transaction records. Note also that recovering the account and recovering the items are separate outcomes; getting the account back does not automatically restore what was taken from it. Unauthorised card payments are a separate route, through your bank or the app store.
Are Roblox account recovery services legitimate?
No, without exception. Access to accounts sits with Roblox alone, so no third party can restore, recover or unban one — there is no mechanism by which they could. What they can do is take a payment, usually in gift cards or cryptocurrency, and ask for the same details the original attacker wanted. Many are run by the same people. Recovery happens through roblox.com, and it never costs money.
roblox account recoveryroblox account hacked what to doreport roblox scamroblox supportrecover stolen robuxroblox account recovery service scam
