A changed password, missing Robux or unfamiliar messages can all point to a compromised Roblox account. Act promptly, but secure the device before changing account details. Otherwise, the person who gained access may simply get back in.
Remove any unfamiliar browser extensions or downloads, especially anything advertised as free Robux, a trading helper or a Roblox cheat. Run a full security scan and update the device before entering a new password.
If the child reused the same password for their email or another service, change those passwords too. Each account should have its own password.
Contact Roblox Support if the password reset fails or the account details were replaced. Roblox recommends writing from the first email address added to the account or the billing email used for the first payment, as this can help with ownership checks.
If items or Robux are missing, report the compromise quickly. Roblox says requests involving lost inventory should be made within 30 days, although restoration is not guaranteed.
Ask what happened without blaming the child. A convincing fake link can catch adults too. Go through the message or website together, report the account that sent it and explain which detail made it suspicious.