People playing Roblox are being targeted with ‘free Robux’ offers in YouTube and TikTok comments and Discord chats, often with a ‘few hours only’ deadline. Tap the link and you land on a login page that looks exactly like the real Roblox one, but it grabs your username, password and even your 2FA codes, then bounces you to the real site so nothing seems off. By then the scammers can empty your Robux. More from The Guardian.
The move
Only ever log in by opening Roblox yourself through the official app or site, never through a link someone posted, and treat 2FA codes like passwords you hand to no one.
Practise it: Would You Click? →
Seen via The Guardian - Internet safety