Someone Got Into My Roblox Account: What to Do Right Now (Parent's Step-by-Step Recovery Guide)
Someone got into your child's Roblox account? Use this 5-minute triage, the full recovery sequence, locked-out fallback, and prevention checklist.
If you're searching for how to monitor your kid's Roblox friends list, you've already done the hardest part — recognizing that the in-game social layer matters as much as the games themselves. Roblox connections shift week to week as kids hop between experiences, accept friend requests, and meet players in chat-enabled servers. The platform reshaped its parental controls in April 2025, so the layout you remember may have changed. This playbook walks through where the Connections List now lives, a 30-second red-flag checklist you can apply to each new contact, a five-minute weekly review that fits real family schedules, what to do when a contact fails the checklist, and how to extend the review beyond Roblox itself. To see what they're actually playing, how to see what game a kid plays on Roblox covers the methods.
Roblox is not a static social network — connections shift constantly. A child who joined two new experiences this week can pick up a dozen new contacts without thinking about it, and friend requests pile up from players met in chat-enabled servers. The list you reviewed a month ago is almost never the list that exists today.
April 2025 brought a major expansion of Roblox's parental controls, including granular friend-list moderation, age-rating gates, and the rename from Friends List to Connections List. If you set up controls more than a year ago and have not opened them since, the dashboard you remember has likely been replaced.
Predators understand this rhythm. They typically meet kids inside Roblox experiences, build rapport in chat, then push to move the conversation off-platform — to Discord, Snapchat, or a private server where Roblox's moderation does not reach. The friends list is the earliest signal that this is happening, which is why a five-minute weekly look is the right cadence — not a one-time toggle.
Before you can see anything, the parent and child accounts must be linked. Roblox now requires a verified parent account that is tied to the child's account through the account-linking flow in the parent dashboard. Without that link, parental controls remain invisible from your side.
Each row in the Connections List shows several fields worth understanding:
Communication Controls determine who can chat or send requests — Friends, Friends of Friends, Everyone, or No One. Content Controls gate which experiences the child can join, which in turn shapes who they will meet in the first place. The Connections List is downstream of both.
Apply this rubric to every new contact. None of these signals alone proves bad intent, but two or more in a single contact warrants removal and a conversation.
A contact that fails two or more lines on this list is a removal candidate, not a discussion point.
A checklist only matters if you actually run it. Keep the ritual short, predictable, and collaborative.
Five minutes. Same time every week. Two pairs of eyes.
When a contact clearly fails the checklist, run a four-step response in order. Skipping a step weakens the next one.
If the contact involved sexual content, solicitation, requests for nude images, or sextortion, escalate beyond Roblox. In the US, file a report with the NCMEC CyberTipline at CyberTipline.org. If a meet-up was discussed or threats were made, contact local law enforcement the same day. A friend list and chat monitoring view helps you catch a risky Roblox contact earlier — the off-platform-move request or suggestive profile — before it reaches the escalation stage.
The weekly Connections List ritual stops what Roblox itself can see. It does not stop what happens after a contact convinces your child to switch to Discord, save a screenshot, or chat at 1 a.m. when the household is asleep. For that you need a device-level layer that sits underneath every app, not inside one of them. NexSpy is built for that gap — it works on Android and iOS, alongside Roblox's own controls rather than replacing them.
The single most common predator move after first contact is asking for or sending images. Even when the chat lives inside Roblox and gets deleted later, screenshots tend to land in the photo gallery — yours and theirs. NexSpy's Inappropriate Image Detection on Android and iOS scans the entire photo gallery using a machine-learning NSFW model and flags suspect images in the Parent Dashboard. You do not have to open the gallery yourself, and a screenshot saved on Tuesday surfaces by Tuesday — not at next Sunday's review.
Image detection pairs naturally with real-time alerts. When a flag triggers, NexSpy notifies you the same day rather than waiting for you to log in. That collapses the window between something concerning happened and parent knows about it from a week to hours. No machine-learning detection is perfect, but the design priority is minimizing false positives, so what does surface is worth opening.
A weekly review limits how stale a problem can get. A per-app daily limit on Roblox limits how big the problem can grow in between reviews. NexSpy's per-app daily limits let you set a cap on Roblox specifically — for example, 90 minutes a day on school nights and two hours on weekends. When the cap is reached, the app locks automatically until the next day's window resets. Fewer hours inside Roblox means fewer new friend requests to triage at the weekend.
For the times Roblox should be off entirely, the scheduled App and Game Blocker handles it. Set the schedule once: blocked during bedtime, school-time, and any homework window you define. Each day the schedule runs itself, and the child cannot extend it without an explicit request and your approval.
Homework hour, family dinner, study weekends — there are moments when no social app should be open at all. Focus Mode locks every app on the device except the Phone app, so emergencies still work but Roblox, Discord, Snapchat, and the other ways predators try to move the conversation are simply unreachable. The child cannot disable Focus Mode on their own. Only the parent can end it early, which makes it useful for the hours when no contact growth should be happening in the first place.
These four pieces — image detection, daily caps on Roblox, scheduled blocks during sensitive hours, and Focus Mode — sit on top of the Roblox Connections List review you already do. They do not replace the checklist. They give it teeth between weekends.
Someone got into your child's Roblox account? Use this 5-minute triage, the full recovery sequence, locked-out fallback, and prevention checklist.
How to block Roblox trading scams targeting kids: name the 5 patterns, lock Trade With settings, close Discord and YouTube side channels, recover fast.
WhatsApp parental control is two layers: the app's privacy settings plus a parental control app on top. Here is how each one works for kids.
Stop TikTok notifications on iPhone, Android, and desktop with this parent's guide — plus what to do when your teen keeps flipping the toggles back on.