timer The 5-minute version
Roblox is not safe for kids. No combination of parental controls or settings changes that. The only way to keep a child safe on Roblox is to supervise 100% of their time on the platform. Roblox has 144 million daily active users, over 40 million of them under 13. It has both an algorithm that decides what your child sees and chat features that let strangers contact them.
Three things you can do right now:
- Link your account to your child's at roblox.com/my/account (Settings > Parental Controls). This gives you visibility into their activity and the ability to restrict features.
- Enable Account Restrictions. This is the most comprehensive safety setting Roblox offers. It restricts your child to "All Ages" rated experiences and disables chat.
- Turn off chat for kids under 13. Roblox now defaults chat to off for kids under 9, but kids 9-12 still get chat enabled by default. You need to disable it manually.
If you want to understand why these steps matter, what Roblox's 145 safety updates actually do (and don't do), and how to think about any app your kid wants to use, keep reading.
Introduction
I get asked about Roblox more than any other platform. More than TikTok, more than Snapchat, more than Fortnite. Parents know something feels off about it, but they can't quite articulate what.
I'm a dad with 30 years in cybersecurity, and I've tested Roblox myself. I created an account as an 8-year-old, set parental controls to maximum, and within an hour I found a game called "Public Bathroom." Swimming pools surrounded by beds with players humping each other and making sexual noises. Bathroom stalls you could enter together. Bathtubs with privacy screens where players were doing things an 8-year-old should never see. This passed their filters, with maximum parental controls enabled.
That was my experience. Your child's experience might be different. But the architecture of Roblox, the way it's built, how it makes money, and what it allows by design, creates risks that parents need to understand before handing it over.
This guide covers what those risks are, why they exist, how to evaluate them, and what you can do about them. I'm going to give you the information and the framework to make an informed decision for your family.
What Roblox actually is
Roblox is not a game. It's a platform where other people create games (Roblox calls them "experiences"), and your child plays them. Think of it like YouTube, but for games. Anyone can create and publish content, and your child browses and plays whatever the algorithm recommends.
Roblox by the numbers
- 144 million daily active users as of Q4 2025 (69% increase from the prior year)
- Over 40 million of those daily active users are under 13
- Over 7 million active user-created experiences on the platform
- Free to play but offers in-app purchases up to $199.99 through Robux. When I signed up as an 8-year-old, one of the first things it tried to sell me was $199.99 worth of Robux.
- Uses a programming language called Luau (derived from Lua), which is educational. Some parents allow Roblox specifically because their kids are learning to code.
- Available on phones, tablets, computers, Xbox, PlayStation, and Meta Quest VR headsets.
The "anyone can create content" part is what makes Roblox different from games like Minecraft or Fortnite. In Minecraft, Mojang creates the game. In Fortnite, Epic Games creates the core content. In Roblox, the content comes from millions of independent creators, and Roblox is responsible for keeping all of it safe for kids. That's a problem I'll explain in a moment.
Roblox partners with children's brands like Barbie and SpongeBob, brands whose primary audiences are preschoolers and elementary school kids. Roblox is rated 13+ on the App Store. But they allow account creation for kids as young as 5. That gap between how they market and who they're actually serving matters.
Two questions that work for any app
Before we get into more specifics about Roblox, I want to give you a framework you can use for any app, game, or platform your child wants to use. I developed this approach because parents can't memorize the risks of every app. New ones launch constantly. But you can learn to ask two questions:
1. Does it have an algorithm?
An algorithm decides what content your child sees. You didn't choose it. Your child didn't choose it. A system optimized to keep them engaged chose it. An algorithm means your child is being served content you haven't reviewed and can't control. Algorithms in the pockets, backpacks and bedrooms of kids correlate to a tripling in youth suicide rates from 2007-2019 and to unprecedented volumes of anxiety and depression prescriptions globally.
2. Does it have a chat function?
Chat means strangers can contact your child. This is the tool that predators use to hunt for kids. If someone you don't know can send your child a message, that's a communication channel you can't monitor and didn't approve.
If the answer to both questions is yes, you're dealing with a high-risk platform that requires active parental involvement.
| Platform | Has an algorithm? | Has chat? | Risk level |
|---|---|---|---|
| Minecraft | check_circle No (player chooses) | remove_circle Yes (fully disableable) | check_circle Lower |
| Fortnite | remove_circle Limited (matchmaking) | remove_circle Yes (disableable) | remove_circle Moderate |
| Roblox | cancel Yes (Discover page) | cancel Yes (partially disableable) | cancel Higher |
Roblox answers yes to both. Let me explain what that means in practice.
Risk 1: The algorithm and content problem
How Roblox decides what your child sees
Roblox uses a two-stage recommendation algorithm on its Discover page. The system filters millions of experiences using engagement levels, retention rates, how much players spend, and social signals like what your child's friends are playing. Games that perform well on engagement and spending get more visibility.
Read that again: the system rewards games that keep kids playing longer and spending more. Safety is not one of the ranking signals.
There is one section called "Today's Picks" that is human-curated with safety and quality review. That's distinct from the main algorithmic feed. But most of what your child sees on the home screen is algorithmically selected.
Content ratings are self-reported
Roblox has a content maturity system with four tiers: Minimal, Mild, Moderate, and Restricted. When a creator publishes an experience, they fill out a questionnaire to self-rate their content. Enforcement for inaccurate ratings only kicks in after "repeated" violations.
The people creating the games are the ones rating whether their games are safe for your child. And they only face consequences if they get caught multiple times.
29% of parents report their children encountered content that should have been blocked by the rating system.
The age-gating change you need to know about
In November 2024, Roblox restructured their content tiers. Here's the part that matters: accounts for children age 9 and older automatically get access to Moderate-rated content. That includes moderate violence, light realistic blood, fear-based content, and unplayable gambling content. No parental consent is required.
I know this because I received this email from Roblox about my own account that I created for testing purposes:
"You are receiving this email because the age on your child's Roblox account will soon be 9 years old. By default, users over the age of 9 can access additional features, such as: Content with a maturity rating of Moderate... If you and your child have not previously modified these settings, your child's settings will be updated to allow access to these and other features."
The email ends with: "While no action is required, we encourage you to customize your child's settings."
"No action is required." Roblox is making a parental decision on your behalf. They're expanding what your 9-year-old can see and framing it as something you don't need to worry about. This is opt-out, not opt-in. If you don't actively go into settings and restrict it, your child gets more mature content automatically.
Roblox knows this. They send the email, but they also know most parents won't act on it.
A stranger is making decisions about what your child can access, and they're telling you it's fine.
Risk 2: The anonymous communication problem
Predators don't wait by the park in a white van anymore. They get on a VPN and look for vulnerable kids on platforms like Roblox. The tools are different. The pattern is the same.
How strangers reach your child
Roblox has six communication features that give them multiple ways in:
- In-experience chat - text chat within games
- Direct messages - private messages between users
- Whisper chat - private in-game messages
- Voice chat - live voice communication (requires age verification)
- Friend requests - anyone can send one
- Trusted Connections - a newer feature for verified real-life relationships
The platform processes over 50,000 messages per second. They have thousands of human moderators and contractors (Roblox does not disclose the exact count) for 144 million daily users.
What the court documents show
Over 100 child exploitation cases involving Roblox have been consolidated into a federal case (MDL No. 3166). Documented victims range from age 6 to 14 across more than 15 states.
The pattern in these cases follows a consistent sequence: a predator enters a game, makes initial contact, gives the child Robux (Roblox's virtual currency) as gifts, isolates the child by moving communication to private channels or off-platform apps like Discord or Snapchat, desensitizes (grooms) them, and then exploits them.
- A 10-year-old girl in California was kidnapped by a stranger she met on Roblox who moved her to Discord to chat privately
- An 11-year-old was coerced into sharing explicit content
- A girl was groomed on Roblox and Discord, then physically assaulted after the predator located her
- Documented cases involving 13-year-olds in Texas and 14-year-olds in California
At least 7 state attorneys general (Louisiana, Kentucky, Florida, Oklahoma, Texas, Iowa, and Nebraska) and Los Angeles County have filed lawsuits or investigations against Roblox. Louisiana and Texas are the most aggressive, with Louisiana alleging CSAM distribution.
NCMEC reports are accelerating
The National Center for Missing and Exploited Children (NCMEC) numbers are accelerating, not stabilizing.
The violent extremist group 764, classified by the FBI as a "tier-one" threat (their highest danger category) and formally designated a terrorist entity by Canada in December 2025, actively recruits children through Roblox, offering Robux in exchange for self-harm videos and child sexual abuse material.
The predator-catcher Roblox banned
A former Roblox player named Schlep, who was himself groomed on the platform as a kid, began running decoy accounts to catch predators inside Roblox. His investigations led to multiple arrests. In August 2025, Roblox permanently banned him and issued a cease-and-desist, triggering the #FreeSchlep movement.
Watch before you decide
Chris Hansen (known for "To Catch a Predator") released a documentary called "Dangerous Games: Investigating Roblox" on February 27, 2026. It features Schlep and examines predator tactics, platform safety failures, and corporate responsibility. It's available on TruBlu.
Shawn Ryan did a podcast episode with Schlep that was released on March 2, 2026 and they discussed Roblox in detail.
If you're considering letting your child play Roblox, watch these first.
Why Roblox's safety updates don't fix the root problem
Roblox has shipped a lot of safety features. They have announced "over 145 safety initiatives" since January 2025. Their CEO went on Fox News and talked about "400 AI systems" and Roblox being "the gold standard for safety." That sounds impressive.
What they've actually built:
Roblox's safety features (2025-2026)
- Real-time chat rephrasing (Mar 2026): AI rewrites profanity into polite language. Only works in-experience, only for age-checked users in similar age groups.
- Facial age estimation (Jan 2026): Video selfie analyzed to determine age group.
- Age-based chat groups: Six age brackets. Can only chat with same or adjacent groups.
- Content maturity ratings: Four tiers enforced since Sep 2025. Self-reported by creators.
- Voice moderation: AI detection of swearing and bullying in 15 languages.
- Trusted Connections: Unfiltered chat with verified real-life contacts (13+ only).
- Text chat matchmaking: Matches positive-behavior chatters together.
- New publishing requirements (Dec 2025): ID verification or real-currency purchase required to publish.
Each of these addresses a symptom. None of them address the root cause.
The architectural problem
Roblox is built on two things: user-generated content at massive scale and anonymous social features. That combination is incompatible with child safety, and no number of AI systems changes that.
Roblox is free. Free platforms make money from engagement. The longer your child plays, the more they interact, the more Roblox earns by selling Robux. Safety features that actually work, the ones that restrict what kids can do and who they can talk to, reduce engagement. Every effective safety feature costs Roblox money.
The one safety feature that Roblox should build
YouTube Kids has a whitelist mode. Parents approve specific channels and videos. Minecraft lets you create private Realms where only parent-approved friends can join.
Roblox could build a whitelist approved-experiences mode where parents select specific games before their child can play them. Nothing else would be accessible. This is the single feature that would give parents actual control.
They won't build it. That feature would reduce engagement. Kids would play fewer games. Revenue would drop.
Instead, they try to distract us by talking about how many AI systems they have.
The face scanning problem
Roblox's facial age estimation system, rolled out globally in January 2026, is supposed to verify users' ages. Here's what's actually happening:
The system gets ages wrong. A 15-year-old was incorrectly verified as 18+. A 23-year-old was placed in the 16-17 bracket. Simple changes in lighting or removing glasses throw off the estimates, partly because age estimation models were traditionally built for the 17-25 range, not young kids.
When it gets a child's age wrong and classifies them as older, it automatically loosens their restrictions. A child classified as 18+ gets placed in the highest-risk social category, visible to the adult users the system was designed to filter them from. The parental controls you set up get overridden without your knowledge or consent.
Parents are accidentally making it worse. When a child gets locked out of features, frustrated parents complete the facial age check using their own faces. That classifies the child as 21+. Roblox calls this "verification fatigue."
It's also easy to bypass. Fake mustaches work. Drawn-on wrinkles work. Uploaded photos of adult celebrities work. A black market for pre-verified accounts appeared within days of the rollout, selling for about $5 on eBay.
If your child gets misclassified, fixing it is hard. Parents can only modify their child's birthday once per account. Once verified with a government ID, the birthday can't be changed through parental controls. A 15-year-old incorrectly classified as 18+ reported receiving only automated responses from support.
And all of this requires Roblox to collect facial biometric data from minors through mandatory video selfies. They claim images are deleted immediately after processing. They also claim this data is "not considered biometric data," which is legally disputed. Discord made the same claims and then we found out they were false when their database got hacked and childrens' home addresses showed up for sale on the dark web.
The face scanning system creates new problems while trying to solve existing ones. It gets kids' ages wrong, accidentally disables protections, is easy to bypass, and collects sensitive biometric data from children. This is what happens when you try to engineer your way around an architectural problem.
Roblox parental controls: what's available and what's missing
Despite everything above, there are controls available. Here's what you can do and what you can't.
What you can set up
Account Restrictions (the most important setting):
Turn this on. It restricts your child to experiences rated "All Ages" and disables all chat features. This is Roblox's strongest safety setting. 47% of parents haven't enabled it.
check_circle Parental controls setup checklist
- Go to Settings > Parental Controls on your child's account
- Link your account (Settings > Account Info > Parental Controls)
- Set a parental PIN so your child can't change settings
- Adjust content maturity to the lowest tier appropriate for your child's age
- Disable or restrict chat features
- Set spending limits (or disable Robux purchases entirely)
Chat restrictions:
- Under 9: chat is off by default (requires parental consent to enable)
- Ages 9-12: experience chat enabled by default, direct messages require parental consent
- Ages 13+: most chat features available
Content maturity settings:
Restrict your child's content level below the age-based default. A 10-year-old defaults to Moderate content, but you can restrict them to Minimal or Mild.
What's missing
- No whitelist / approved-experiences mode. You cannot pre-approve games before your child plays them.
- No real-time monitoring or alerts. You can see activity after the fact, but you can't get a notification when your child adds a friend, enters a new game, or receives a message.
- Friend requests remain ungated. Anyone can send your child a friend request.
- Content ratings are unreliable. Self-reported by creators, enforced only on repeat violations.
- No filter for gambling mechanics. Researchers who played 30 trending Roblox games found they averaged 9.5 out of 12 gambling-like mechanics (spin wheels, loot boxes, randomized drops, purchasable luck), nearly double the 2025 average of 4.6. There's no parental control to filter these out.
Known bypasses kids use
- False birthdates at account creation
- Creating alternate accounts
- Borrowed adult IDs for age verification
- YouTube tutorials teach specific bypass methods
- Private server admin commands can circumvent chat restrictions
- Third-party chat launchers
- Moving conversations to Discord, Snapchat, or WhatsApp (outside Roblox's monitoring entirely)
Monitoring: what it adds and what it can't replace
There's an important distinction between parental controls and monitoring. Parental controls restrict what your child can do. Monitoring watches what they're actually doing and alerts you when something is concerning.
Roblox has parental controls. It does not have real-time monitoring for parents. And Roblox's controls stop at the edge of Roblox. When a conversation moves to Snapchat or Discord, Roblox can't follow it.
The Bark Phone
The Bark Phone is a Samsung Galaxy built on a custom version of Android with monitoring and controls built into the operating system. Your kid can't uninstall it, disable it, or delete their messages before you see them.
- Monitors Roblox text chats, Snapchat, Discord, Instagram DMs, TikTok DMs, WhatsApp, and YouTube
- Bark rates Roblox 1 out of 5 stars and recommends it for ages 16+
- If a conversation starts on Roblox and moves to another app, Bark is still watching
- App time limits your kid can't bypass or disable
Bark app on an existing device
If your kid already has an Android phone, the Bark app monitors many of the same apps: Roblox chats, Discord, Snapchat, Instagram DMs, TikTok DMs, and WhatsApp.
Try the Bark app →Parental controls restrict. Monitoring watches. If your kid is on any platform where strangers can contact them, they need both.
Learn more about what Bark monitors on specific devices and apps.
Roblox vs. Minecraft vs. Fortnite
If your child plays games online, you're probably weighing these three platforms against each other. Here's how they compare on the things that matter for safety.
| Minecraft | Fortnite | Roblox | |
|---|---|---|---|
| Has an algorithm? | check_circle No (player chooses) | remove_circle Limited (matchmaking) | cancel Yes (Discover page) |
| Has chat? | check_circle Yes (fully disableable) | check_circle Yes (fully disableable) | cancel Yes (partially disableable) |
| Content source | check_circle Curated + mods | remove_circle Curated + Creative | cancel 100% user-generated |
| Offline play? | check_circle Yes | cancel No | cancel No |
| Whitelist mode? | check_circle Yes (Realms) | remove_circle Limited | cancel No |
| In-app purchases | check_circle $1.50-$10.75 | remove_circle Up to $89.99 | cancel Up to $199.99 |
| Age rating | E10+ | T (Teen) | 13+ (accounts at age 5) |
Most protected: Minecraft. Offline play, private Realms with invited friends only, full chat disable. If your primary concern is safety, Minecraft gives you the most control.
Moderate protection: Fortnite. Epic Games creates and curates the core content. Chat (voice and text) can be fully disabled through parental controls. The main risk is voice chat with strangers in Battle Royale if left enabled.
Most challenging to secure: Roblox. User-generated content, algorithm-driven discovery, partial chat controls, no whitelist, no offline mode. Roblox requires the most parental involvement to reduce risk.
Frequently asked questions
Can predators contact my child through Roblox?
Yes. Court documents in MDL No. 3166 describe over 100 cases of child exploitation involving Roblox. Predators use in-game chat, direct messages, and friend requests to make initial contact, then move kids to Discord or Snapchat for private communication. NCMEC received 3,000 exploitation reports from Roblox in 2022, 13,300 in 2023, and 24,500 in 2024. The numbers are accelerating.
What about Robux and spending money?
Roblox offers in-app purchases up to $199.99. When I tested the platform as an 8-year-old, Robux was one of the first things it tried to sell me. Robux is also used by predators as a grooming tool, gifting virtual currency to build trust with children. Set spending limits or disable purchases entirely in parental controls.
My child says everyone plays Roblox. What do I do?
This is the hardest question. The social pressure is real, and your child isn't making it up. But "everyone does it" is not a safety assessment. You can allow Roblox with strict parental controls while having an honest conversation about why those controls exist. You can also look at what your child actually wants from Roblox. If it's playing with friends, Minecraft Realms might give them that with better safety. If it's the creative building, Minecraft's Creative mode or even Roblox Studio (the development environment, which doesn't require playing public games) might be alternatives.
Is Roblox educational because it teaches coding?
Luau is a real programming language (derived from Lua), and some kids genuinely learn to code through Roblox Studio. That's valuable. But most kids on Roblox are not coding. They're playing user-generated games in the Discover feed. The educational argument applies to Roblox Studio specifically, not to playing Roblox games.
What about YouTube videos about Roblox?
YouTube content about Roblox is a secondary exposure risk. Even if your child doesn't play Roblox, they may watch videos that normalize the platform's content. YouTube's algorithm will recommend increasingly edgy Roblox content once your child watches a few videos. Apply the same framework: YouTube has an algorithm, and YouTube has comments (which function as chat).
Can I just use Roblox's parental controls?
Roblox's parental controls are better than they were a year ago. They're still not sufficient on their own. The content rating system depends on creator self-reporting. Chat restrictions are porous at the edges. There's no whitelist feature. And the facial age estimation system can accidentally disable your settings. Use Roblox's controls as one layer, not as your only layer.
Beyond Roblox: protecting your child's whole device
Roblox is one app on your child's device. Setting up Roblox's parental controls doesn't protect them from Snapchat, TikTok, YouTube, Safari, or the next app they download.
If you'd prefer a device that handles a lot of this for you, the Bark Phone is built specifically for families. It has tamper-proof monitoring built in, including Roblox chat scanning, app time limits, and AI-powered alerts. I've written a detailed review on my site.
For guides on other games your child plays: