A 10-year-old child reportedly lost in-game currency known as Robux after clicking on a link that promised additional Robux. The link led the child to a website that looked like the official Roblox login page but was actually a phishing site. Phishing is a type of fraud where criminals create fake websites or emails to steal personal information. According to NordVPN, more than 200 online addresses were identified in a seven-day period that sold these fake login pages, often obtained from the dark web, a part of the internet that requires special software to access and is often used for illegal activities. These phishing links are frequently found in comments on videos on platforms like YouTube or TikTok, or in chat rooms on Discord, a popular online communication platform. The messages often urge users to click on a link to claim free Robux, creating a sense of urgency. Once the child enters their login details on the fake site, they are redirected to the real Roblox login page, making it difficult to recognize the scam. Fraudsters may then sell the stolen login details or use them to transfer Robux to another account. Robux can be earned by playing games on Roblox or purchased through the company's online store, with some packages costing up to £199.99. NordVPN analyst Gerald Kasulis explains that the fake website redirects users to the legitimate site, which is why the child may not realize they've been scammed. In some cases, the child may also be asked to enter two-factor authentication codes, which are additional security measures meant to protect accounts. These codes should be treated like passwords and never shared with anyone. Roblox states that it is not required to help users whose accounts have been hacked unless the law demands it. The company may recover lost items or their value in "very limited circumstances." Roblox has security features such as two-factor authentication and tools to prevent unauthorized logins. The company encourages users to follow security best practices, like avoiding links or downloads from unknown sources. Experts recommend that children be taught about online scams and encouraged to access Roblox only through the official app or website. Two-factor authentication is an important security measure, but the codes should never be shared. Parents are advised to monitor their children's online activity and ensure they understand the risks of clicking on suspicious links.