Roblox QR Code Scam: Free Robux Codes That Steal Your Account

The "free Robux generator" QR code

This is the most common variant. A YouTube video, Discord message, or social media post promises 10,000 free Robux and tells you to scan a QR code to claim them. The code opens a site that looks superficially like a Roblox promotion page. It asks for your Roblox username and password to "send the Robux to your account."

There is no Robux. The moment you enter your credentials, the scammer logs in to your account on a separate device, changes the password and email address, and takes everything — your items, your saved Robux, and any stored payment method linked to the account.

The key fact: Roblox never distributes Robux through QR codes or any third-party website. Free Robux do not exist outside of Roblox's own systems. Any external site or QR code claiming to send you currency is a phishing trap.

Fake Roblox gift card QR codes

A second variant involves QR codes advertised as Roblox gift cards — shared on online marketplaces, social media, Discord servers, and in YouTube video descriptions. The premise is that someone is giving away a gift card code and all you need to do is scan the QR code to retrieve it.

What actually happens: the QR code opens a phishing site that asks you to sign in to your Roblox account to "redeem" the code. In some versions you are taken to a fake gift card redemption page that harvests credit card details under the pretense of covering a small "processing fee." In other versions the QR code itself simply contains a gift card code that has already been redeemed and is now worthless.

Legitimate Roblox gift cards are sold exclusively at major authorized retailers — Target, Walmart, Best Buy, and GameStop — as physical cards with a scratch-off code on the back, or as digital codes delivered to a verified email at checkout. They are never distributed via QR codes in social media posts.

Limited-item and event QR codes in videos and comments

A third variant exploits the popularity of limited-edition Roblox items and seasonal events. QR codes appear in YouTube video descriptions, TikTok comments, or Discord announcements claiming to unlock a rare avatar item, an exclusive in-game accessory, or a promo code tied to a current event.

These pages mimic Roblox's own promotional hub and ask you to sign in to apply the item. Entering your credentials gives the attacker access to your account. Some versions also request email and date of birth — enough information to attempt account recovery and lock you out permanently.

Roblox announces genuine limited items and promotional codes only through official channels at roblox.com/promocodes and on verified Roblox social media accounts. Any code or item promoted through a YouTube description, a random Discord server, or a TikTok comment is not affiliated with Roblox.

Physical QR codes on school flyers and bulletin boards

Scammers also operate offline. QR code stickers appear on school bulletin boards, lockers, community boards at libraries and recreation centers, and handwritten flyers slipped under doors in apartment buildings near schools. They advertise free Robux, free gift cards, or Roblox tournaments requiring a scan to register.

Physical flyers give the scam an air of legitimacy — it feels more official than a random link online. The QR code destination is identical to the online versions: a credential-harvesting page or a subscription-trap that charges a recurring fee.

If you see a flyer like this, do not scan it. Remove it from the bulletin board if you can, and report it to school administration or the building manager so others are not targeted.

What to do if you or your child already scanned one

If the QR code was scanned but no information was entered, close the browser tab and clear browser history. No further action is needed.

If Roblox credentials were entered, act immediately:

1. Go to roblox.com on a trusted device and change the password now. If the attacker has not changed it yet, you can still recover the account. After changing the password, sign out of all other sessions in Account Settings → Security → Sign Out of All Devices.
2. Enable two-step verification. Go to Account Settings → Security → Two-Step Verification and add an authenticator app. This prevents the attacker from logging back in even if they saved the old password.
3. Check recent account activity. Review your purchase history for unauthorized Robux transactions and your inventory for missing items. If Robux were spent or items were traded away, contact Roblox Support at roblox.com/support — they can sometimes reverse fraudulent transactions if reported quickly.
4. If you can no longer sign in, go to roblox.com/support and file an account recovery request. Roblox verifies ownership through the original registration email address or phone number, so access to that email is essential.
5. If payment card details were entered, call your bank's fraud line immediately, dispute the charge, and request a new card number.
6. Report the scam. File a report with the FTC at reportfraud.ftc.gov. If a physical flyer was involved, notify school administration and local police.

Frequently asked questions