Roblox account hacked and Robux spent? What support can restore

You log in and your Robux balance says zero. Your avatar is wearing stuff you never bought, or your favorite items are just gone. Your Roblox account was hacked and the Robux got spent, and right now you mostly want to know one thing: can you get it back? The honest answer is "maybe, partly, if you move fast". This guide walks through what Roblox actually says it can restore, what it says it cannot, and the order to do things in so you do not waste the window you have.

The short answer: what Roblox says it can and cannot restore

Roblox is very upfront about this in its help center, and it is better to hear it now than after a week of hoping. Here is the policy, in plain words:

• No guarantee. Roblox says it does not guarantee that a compromised account will be restored to its previous state, or that lost virtual items or Robux can be recovered.
• Sometimes, inventory comes back. Roblox says it may, in some cases, offer owners of compromised accounts a way to recover lost inventory or the approximate value of that inventory.
• There is a deadline. To be considered for that, you need to contact Roblox within 30 days of the compromise.
• Normal purchases are final. Separately from hacks, Roblox says there is no way to get Robux back once you have made a purchase, so do not expect an automatic "undo" button on each item.
• Off-platform deals are not covered. If items were lost in a deal made outside Roblox’s official trade and sale features, Roblox says it cannot return them.

So the realistic goal is: get the account back under your control, document exactly what was taken, and get a support ticket in well inside 30 days. Everything below is built around that.

Write today’s date down the moment you notice the hack. The 30 day window counts from the compromise, not from when you finally get around to filing, so the sooner you report, the better.

Step 1: Lock the hacker out before you do anything else

There is no point asking for items back while someone else can still log in and spend. Secure the account first. If you can still sign in, do this in order:

1. Scan your computer for malware. Roblox specifically says to remove malware before contacting support, because it can let someone compromise the account again. Fake "free Robux" tools, script executors and shady browser extensions are common ways in.
2. Change your password from Settings, Account Info. Make it long and unique, not a variation of an old one. Our password generator makes one in your browser.
3. Sign out every other device. In Settings, open the Security tab and scroll to "Where you’re logged in". The "Log Out of All Other Sessions" button kicks out every session except the one you are using.
4. Turn on 2-Step Verification in Settings, Security. Roblox recommends the authenticator app option.
5. Check that the email and phone on the account are still yours and verified. Verified contact info is what makes the password reset work next time.

If you cannot sign in at all, use "Forgot Password or Username?" on the login page. The reset link goes to the email currently on the account. If the hacker changed that email, the reset will not reach you, and you will need to contact Roblox Support. Our full walkthrough for that path is in how to recover a hacked Roblox account.

Step 2: Find out exactly where the Robux went

Support can only act on specifics. "All my Robux are gone" is a lot weaker than a list of what was bought, when, and for how much. Roblox gives you that list on the My Transactions page.

1. On the Roblox website, click the Robux icon in the upper right corner.
2. Click your Robux amount. The My Transactions page loads.
3. Use the filter in the upper left. "Summary" shows Robux coming in and going out. "Purchases" lists the virtual items and passes that were bought.
4. Screenshot or copy every purchase you did not make, with the date and the Robux amount.
5. Also look at your inventory and avatar for anything missing. Note what was there before, as best you can remember.

Do not delete the junk items the hacker bought. Roblox says deleting an item does not get you Robux back, and those items are part of the evidence of what happened.

Step 3: Contact Roblox Support with the right details

Use the official support form at roblox.com/support. Pick the option for a hacked or compromised account and include as much of the following as you have:

• Your username, plus any old usernames if you changed it.
• The first email address you ever used on the account, or the billing email from the first payment. These are the details Roblox asks for when it cannot verify ownership any other way.
• The date you noticed the hack, and roughly when you think it started.
• Your list of purchases you did not make, from My Transactions.
• A list of the items that are missing from your inventory.
• Purchase receipts for Robux you bought with real money, if you have them.

Roblox notes that giving this information still does not guarantee recovery. It does make your case much easier to verify. And one hard rule: Roblox Support is the only place that can restore anything. Anyone on Discord, YouTube or TikTok who offers to "recover" your account or your Robux for a fee is running a second scam on top of the first one.

What if the hacker charged your card or your parents’ card?

Robux bought with real money is handled differently from Robux spent from your balance. Roblox has a separate unauthorized charges process, and the details matter:

• Contact support before disputing. Roblox asks you to reach out to Customer Support first, because once a charge has been disputed with the bank or card company, Roblox can no longer issue a refund through its own process.
• Check the statement name. On card, PayPal or Google Play statements, a charge that reads "Xsolla*Roblox" goes to Xsolla’s support team. A charge that reads just "Roblox" goes to Roblox Support.
• App stores and consoles handle their own refunds. If the Robux were bought through Apple, Microsoft, PlayStation, Meta Quest, Samsung or Amazon, Roblox cannot refund those charges. You have to ask that store.
• List each charge by date and amount, the name on the billing account, and the last four digits of the card or the PayPal email.

Heads up: if a refund goes through, Roblox can remove the Robux tied to that purchase and send a message to the account’s inbox saying so. That is normal. Roblox also says unauthorized charges and refund abuse can lead to moderation, which is one more reason to report honestly and through the official route.

How Roblox accounts usually get hacked

Knowing how it happened tells you what to fix. The usual suspects:

• "Free Robux" offers. Roblox says plainly that any offer of free Robux or free items is a scam. These sites exist to collect your password or get you to run something.
• Fake login pages. A copied Roblox login on a lookalike domain takes your password and sometimes your 2-Step code too.
• Downloads that steal sessions. Cheats, executors and "Robux generators" often carry malware that grabs saved passwords and logged-in sessions. That is why Roblox tells you to clean the PC first.
• Reused passwords. If your Roblox password was also on a site that leaked, someone can just log in. Roblox even shows a banner asking you to change your password when it thinks yours may have been stolen from another service.
• Shared logins. Giving a friend your password "just to grind" means trusting every device they log in from.

If you got a 2-Step Verification prompt you did not ask for, Roblox says to deny it, because it means someone probably has your password. Change it right away.

Make sure it never happens again

Once you are back in, spend ten minutes making the account hard to take and easy to recover:

1. Keep 2-Step Verification on, using an authenticator app. If you want to see how those six digit codes work, try our 2FA code generator.
2. Generate recovery codes in Settings, Security. Each code works once, and making a new set turns off the old ones. Store them somewhere that is not your phone.
3. Add a second recovery method. Roblox says that if you lose your main 2-Step method, you need two different methods on the account (like a phone number, a passkey or backup codes) to get back in. Without them you may not be able to recover the account.
4. Use a unique password for Roblox and for the email behind it. Check your old favorites in the password strength checker.
5. Write down the first email you used on the account and keep your Robux receipts. Those are exactly what support asks for when everything else fails.

That last point is where most people get stuck. The original email from when you made the account at age ten, the receipts, the recovery codes, the authenticator on an old phone: it all ends up scattered. LoginScout is a private vault for gaming logins that keeps your Roblox username, password, 2FA codes and recovery notes together, encrypted on your device. Our gaming password manager page explains how it works.

The checklist, in one place

• Note the date you found the hack. The 30 day window is real.
• Clean your PC, change the password, log out of all other sessions, turn on 2-Step Verification.
• Pull your unauthorized purchases from My Transactions and list missing items.
• File a ticket at roblox.com/support with your username, first email and evidence.
• For real money charges, contact Roblox or the app store before you dispute with the bank.
• Save recovery codes and a second recovery method so a lost phone does not lock you out.

Robux spent by a hacker may or may not come back, and that part is up to Roblox. What is fully up to you is how fast you report and how ready you are next time. You can create a free LoginScout vault for up to five accounts and start with your Roblox login, its first email and your recovery codes.