Scammers abuse Roblox Limiteds, Robux, and account-value culture to steal logins, empty Robux balances, and push gift-card or crypto “middleman” payments. Typical bait: a Discord / group-chat promise of a free Limited, a “Robux generator,” a fake trade bot, or a lookalike roblox.com login that harvests your password and 2FA. Roblox does not need you to log in on a random third-party site to claim a Limited, and staff will not DM you free valuables that require a fresh password entry.
This guide is Limited / item / login–specific. Gaming Discord cousins: Fake Discord Nitro scams. Broader patterns: Phishing and account takeover. Landscape: Credit and debt scams.
How fake Limited plays work
| What you see | What is actually happening |
|---|---|
| “Free Limited giveaway—log in to verify” | Credential phishing page that clones Roblox login |
| “Robux doubler / generator—paste your cookie or password” | Session/token theft; account takeover |
| Discord “middleman” who holds cash or gift cards for a Limited trade | Payment extract; item never arrives (Gift cards and prepaid debit risks) |
| Friend account offers an impossible underpriced Limited | Their account was hijacked; trade or link is bait |
| “Roblox Support” asks for your password to reverse a ban or restore items | Impersonation; real support never needs your password |
Limited items and Robux are real Roblox features. The scam is the off-platform login, the generator, or the gift-card middleman—not trading inside official Roblox tools.
Common Roblox Limited / login scripts
- Giveaway phishing. Message claims you won a rare Limited. The URL is a lookalike (extra letters, odd TLD). You enter username + password (+ 2FA); attacker takes the account and dumps inventory.
- Cookie / “.ROBLOSECURITY” stealer. “Verifier” or browser extension asks you to paste a session cookie. That cookie is full account access without your password.
- Fake trade bots and group games. Third-party “trusted trader” sites or Discord bots request OAuth or password; they never complete a fair Limited swap.
- Off-platform payment for in-game value. Buyer or seller insists on Venmo, Zelle, PayPal Friends & Family, or gift cards outside Roblox (Zelle and P2P scams). Chargebacks are hard once PINs are shared.
- Age / parent follow-on. After login theft, attackers may mess with linked payment methods, parent emails, or Premium billing on the real account.
Worked example
Sam, 14, sees a Discord server post: “FREE limited!!! claim at rob1ox-gift.shop/verify”. Sam enters his Roblox password and authenticator code. Within minutes his Limiteds are traded away and his friends get the same link from “his” account. Healthy version: Sam opens Roblox only from the official app or roblox.com he types himself, ignores Discord claim links, and tells a parent. He enables 2FA, reviews connected devices, and never pastes a browser cookie into chat. Any gift-card ask for a “trade hold” is an automatic no.
Hard rules that prevent most losses
- Never log in to Roblox from a link in Discord, SMS, email, or a group shout; use the bookmarked app or type roblox.com yourself.
- Roblox staff will not DM free Limiteds that require a fresh login on an external page.
- Refuse Robux generators, cookie paste forms, and unknown browser extensions.
- Keep trades inside official Roblox trading tools when available; treat cash / gift-card middlemen as hostile.
- If a friend’s account suddenly offers impossible Limited deals, assume compromise until verified off-platform.
If you already clicked, logged in, or paid
- On a clean device, change the Roblox password; enable or rotate 2FA; sign out other sessions; review email and payment methods.
- Check inventory and Premium / billing for changes you did not make; contact Roblox Support through official Help only.
- If a cookie or extension was shared, treat the session as stolen until fully rotated; remove unknown extensions.
- For gift-card or P2P losses, contact the issuer promptly; file ReportFraud.ftc.gov for patterns.
- Warn friends on another channel; reject paid “recovery agents.”
Parents: walk through passwords and payment methods together; use family account settings and spend limits where Roblox offers them. Remote-access “helpers” who claim they can restore Limiteds are often a second scam: Fake tech-support refund scams.
Checklist
- Treat unsolicited Limited giveaway links as hostile.
- Open Roblox only via official apps or URLs you type.
- Never paste cookies, passwords, or 2FA codes into Discord.
- Avoid gift-card and P2P “middleman” trades for in-game items.
- Verify surprise offers with the sender off Discord / chat.
- Report phishing with Roblox’s official report flows and keep screenshots.
Educational only. Not legal, security, or fraud-recovery advice. Roblox and payment-network policies change; verify offers inside the official client and Help Center.