Roblox Account Hacked: How to Get It Back

You try to log in to Roblox and the password no longer works. Or the avatar looks different, the Robux are gone, or a friend says you sent them a strange message. For a child, this feels like a disaster. For a parent, the first worry is how to get the account back and whether the items can come back too.

This guide follows Roblox's own pages. They set out an order of steps, the details that help Roblox check ownership and a time limit for seeking help with lost items. They are also honest that Roblox does not promise a result. One wrong step can cost you the account, so know what you are doing before you start.

Last checked: 25 October 2026.

#What Order Should I Follow?

Roblox's My account was hacked - What do I do? page lists the steps to take for getting your account back on track. The order matters, because a reset on a computer that still carries malware can hand the account straight back to the thief.

1. Remove off-site downloads and browser extensions. The page says you need to get rid of any malware before recovering your account. It tells you to run a full virus scan, restart the computer, run the scan once more and remove any browser extensions, using only extensions from safe and verified websites.
2. Reset your password to something secure that is not easy to guess, using the steps Roblox links to.
3. Turn on 2-Step Verification in Settings, then Security. The page calls it an added security measure for the account.

Do these on a device you trust. Do not enter your Roblox login on any site other than the official roblox.com site or the login screen of the official apps, as Roblox's account safety page says.

#What If Resetting the Password Does Not Work?

The hacked account page says that if resetting does not work and you need help getting back in, you should contact Roblox. To help it verify that you are the original account owner, it asks you to contact it using either the first email address added to the account or the billing email address used for the account's very first payment.

The page says that even if the account was compromised and the email was changed, this original information is still valuable for verification. It also says Roblox conducts a thorough review of account details and that providing the information does not guarantee account recovery. If the account never had an email address or a card or PayPal purchase, it says it can still explore other options to verify ownership.

Gather what you have before you contact Roblox. Write down the username, the earliest email you can remember using and any receipts from the first purchase. Do not send your password, and do not send a login code to anyone.

#What Does Roblox Say About Lost Items and Robux?

Read this part calmly, because it is blunt. The hacked account page says that unless required by law, Roblox is under no obligation to assist users whose accounts have been compromised. It says Roblox does not guarantee that an account will be restored to its previous state, or that it will be able to recover lost virtual items or virtual currency.

It adds that only in very limited circumstances may Roblox offer compromised account owners the ability to recover lost inventory or the approximate value of that inventory. It also says that if your account is compromised and you seek assistance, you must contact Roblox within 30 days of compromise. That is the 30 days in the title of this guide, and it applies to seeking help with lost items. Do not delay.

#What If the Account Was Banned After the Hack?

Sometimes a thief breaks a rule and the account is moderated. Roblox's Appeal Your Content or Account Moderation page says you can contact the Roblox Appeals team if your account has been banned or moderated. It says the team will give the moderation a second look, and that submitting an appeal does not guarantee the consequence will be removed.

The page says your moderation notification tells you which appeal options you have, either through Violations & Appeals or through the Roblox Support Form. For a support form account appeal, it asks for the account username and a brief statement of the reason for your appeal.

This page has its own time limit, and it is a different 30 days. It says an appeal must be submitted within 30 days of the moderation action affecting the account, and that EU users have 6 months to appeal an initial moderation action. It also says a moderation that has been reviewed cannot be reviewed again, that duplicate appeals will not be reviewed and that only the account owner may send an appeal from a valid email address for the account. Because there is only one review, make the first appeal count.

#How Do I Make the Account Harder to Take Again?

Roblox's Keep Your Account Safe page says that adding an email address helps with resetting a password, enables 2-Step Verification and makes it easier for Roblox to help you when you contact it. It says never to share your password, browser cookies, 2-Step Verification codes or backup codes, and that Roblox employees will never ask for them.

It also says to use a unique password, to log out on shared computers and to never add someone else's email address to your account, because only your own or a parent's email should be verified there. It warns about scam and phishing sites, about in-experience forms that ask for login details and about malware, and it says Roblox does not create browser extensions.

On 2-Step Verification, Roblox's Add 2-Step Verification to Your Account page says you need a verified email address to turn it on and lists three methods: email, authenticator app and security keys. It says that if you log in through email one-time code or a passkey, your 2-Step Verification is not used for that login in some cases, so read the notes for your method. It also says that if you get a login approval prompt you did not trigger, you should deny it and change your password, because someone might have your password.

Our guide to hacked accounts even with two-factor authentication explains how accounts still get taken, and our guide to what to do in the first 24 hours after a hack covers the general order of steps.

#Why Is Trading Outside Roblox So Risky?

Roblox's How to avoid trading scams page says Roblox cannot enforce deals made outside its official features. If you make a deal outside them and the other player breaks it, it says Roblox cannot return your items or Robux. The only safe ways it lists are the Trade feature and the Sell features, and it says to treat every other method as unsafe.

The page lists deals to avoid. These include using trades to pay for accounts, real world money or groups, lending out your account or items, agreeing to any deal where one person has to go first and trust the other, and giving your account or item to someone else to sell or trade for you. The hacked account page adds that stealing accounts or items is a severe violation and that associated accounts involved in theft will be deleted.

This matters after a hack. A person who offers to buy your lost items back, or to get them returned, is making a deal outside Roblox, and Roblox says it cannot recover those. Report scammers with the Report Abuse buttons the page describes.

#What the Pages Do Not Say

The pages we read do not give a time for Roblox to reply, they do not promise that the account will be restored and they do not promise any item or currency back. They do not say what evidence Roblox will accept beyond the examples above. We do not claim to know your outcome.

#When It Is Safer to Get Expert Help

Some hacked accounts need only the steps above, and the official steps stay first. The risks are real, though. Roblox says you must contact it within 30 days of compromise to seek help with lost items, and that it does not guarantee any restoration. Appeals are reviewed once, within 30 days of the moderation action. It says deals made outside its systems cannot be recovered. People who offer to get Robux or items back for a payment, or who ask for a password or code, are not using a route Roblox describes. Our guide to spotting fake recovery services lists the signs.

If you are unsure about any step, or the account matters to your child, your income or your business, handing the case to an experienced team such as AwareXone is the safer choice. We can help you gather ownership details, write a clear message to Roblox and secure the other accounts that share the same email. See our account security help page, and use the Apply for Case Review button at the end of this guide.

#When a Case Review Makes Sense

If the first reset failed, the email was changed, the 30 days are running or the account was banned after the hack, a review can help you decide what to do first. SocialSafe by AwareXone is a Malaysia-based service, independent of Roblox, that helps you use the official routes. We never ask for your password or login codes, and we cannot change Roblox's decisions. See how we work on our trust page.

#Frequently Asked Questions