investigating Brand: Roblox

Lookalike game sites can steal player information

A website using the address vwww-roblox[.]co uses Roblox's name with an unusual vwww- prefix and a different domain ending. Lookalike game sites can be used to trick players into entering passwords, verification codes, or payment details. Do not sign in through a link sent in a chat, video, ad, or game message.

WatchOut graphic highlighting the unusual vwww- prefix and [.]co ending in the defanged address vwww-roblox[.]co.
Look closely at game websites. An extra letter or unfamiliar domain ending can be a warning sign.

Observed domain or link

  • vwww-roblox[.]co

What to do

  • Close the page and do not enter your password or verification code.
  • Open the official game app or type the official website address yourself instead of using the link.
  • Ask a parent, guardian, or trusted adult before signing in through an unfamiliar game website.
  • If you entered a password, change it through the official game service, change it anywhere else you reused it, and turn on multi-factor authentication.
  • If a child received the link in a game or chat, use the platform's built-in report and block tools.

What this alert does not establish

  • Scammers can change domains quickly. A familiar game name in a web address does not prove that the page belongs to the game company.

Share this warning

This alert is also on WatchOut, our shareable alert feed, with one-tap sharing and free email alerts.