Many young users lower their guard because these interactions feel like part of the game itself.
En los espacios donde los niños juegan, los depredadores también encuentran refugio. Roblox, con más de cincuenta millones de usuarios diarios en su mayoría menores, se ha convertido en uno de los entornos digitales más explotados del mundo, donde el fraude, el grooming y el robo de identidad operan con una facilidad inquietante. Kaspersky documentó más de 1,5 millones de intentos de ataque en apenas doce meses, y la Agencia Española de Protección de Datos ha abierto una investigación formal. La pregunta que queda suspendida no es si el peligro existe, sino si las familias, los educadores y la propia plataforma actuarán con la urgencia que los niños merecen.
- Más de 1,5 millones de ciberataques dirigidos a menores fueron detectados en un solo año, convirtiendo a Roblox en uno de los cinco entornos de juego más explotados del mundo.
- La arquitectura abierta de la plataforma permite que cualquier persona cree mundos y juegos sin verificación real de edad ni supervisión efectiva del contenido generado por usuarios.
- Depredadores se camuflan dentro de la economía del juego —prometiendo Robux, regalos o premios— para extraer contraseñas, datos bancarios e imágenes íntimas de menores.
- España ha respondido con una investigación formal de la AEPD y la activación de la línea 017, un servicio de atención confidencial para víctimas de acoso digital disponible los 365 días del año.
- Familias y educadores enfrentan el imperativo de combinar controles parentales, alfabetización digital y conversaciones abiertas con los menores antes de que el daño ocurra.
Roblox ha dejado de ser simplemente un juego para convertirse en un ecosistema social donde cincuenta millones de niños se conectan cada día —y donde los ciberdelincuentes han encontrado un terreno fértil. Entre abril de 2024 y marzo de 2025, los investigadores de Kaspersky detectaron más de 1,5 millones de intentos de ataque relacionados con la plataforma, situándola entre los cinco entornos de juego más explotados a nivel mundial.
Los métodos son eficaces precisamente porque se mimetizan con la experiencia del juego. Los criminales ofrecen Robux, premios o regalos a cambio de contraseñas, datos personales o información bancaria. Pero el peligro no se limita al fraude económico: identidades falsas, acoso sexual encubierto, solicitud de imágenes explícitas y contacto directo de adultos que se hacen pasar por menores forman parte del paisaje cotidiano de la plataforma. La Agencia Española de Protección de Datos ha abierto una investigación formal ante la gravedad de estos riesgos.
El problema estructural reside en que Roblox funciona como un ecosistema abierto donde cualquiera puede crear contenido. Aunque la empresa ha reforzado recientemente sus mecanismos de verificación de edad, basta con un correo electrónico para crear una cuenta y falsificar la edad es trivial. El volumen de juegos creados por usuarios hace que una moderación real sea prácticamente inviable.
La respuesta debe comenzar en casa. Los expertos recomiendan que las familias conozcan qué plataformas usan sus hijos, con quién interactúan y cómo se desarrollan esas conversaciones. Las herramientas de control parental, combinadas con una educación digital adaptada a la edad, constituyen la primera línea de defensa. Para quienes sospechen que un menor ha sido víctima de explotación, la línea 017 del Instituto Nacional de Ciberseguridad ofrece atención confidencial y especializada los 365 días del año, también por WhatsApp y Telegram. Que este recurso exista y sea necesario dice mucho sobre la magnitud del problema.
Roblox has become a playground for predators. With more than fifty million children logging in every day, the platform has transformed from a simple game into a digital hunting ground where grooming, fraud, and identity theft operate with minimal friction. Kaspersky's security researchers documented the scale of the problem in stark terms: between April 2024 and March 2025, they detected over 1.5 million attack attempts disguised as Roblox-related content, placing the platform in the top five most exploited gaming environments globally.
The mechanics of exploitation are straightforward and effective. Criminals promise children virtual rewards, lottery winnings, or gifts in exchange for personal information, passwords, or banking details. These offers feel natural within the game's economy—Robux, the platform's virtual currency, is central to the experience. Marc Rivero, lead security researcher at Kaspersky, describes the vulnerability plainly: many young users lower their guard because these interactions feel like part of the game itself. But the threats extend far beyond financial fraud. False identities, covert sexual harassment, solicitation of explicit images, and direct contact from adults posing as children all occur within Roblox's ecosystem with alarming regularity. Spain's data protection agency has opened a formal investigation into the platform specifically because of these dangers.
The root problem lies in Roblox's architecture. The platform operates as an open social ecosystem where anyone can create worlds and games, generating a community that is nearly impossible to moderate at scale. While the company has recently strengthened age verification mechanisms, the barrier to entry remains minimal—an email address and password are sufficient to create an account, and falsifying one's age is trivial. Beatriz Izquierdo, speaking on Finde esRadio, emphasizes a critical gap: there is no genuine verification that user-generated content is age-appropriate. The sheer volume of user-created games makes meaningful oversight impractical.
Parents and educators face a clear imperative: protection must begin at home. Rivero stresses that families need to understand which platforms their children use, who they interact with, and how those interactions unfold. Age-appropriate digital literacy education, combined with technical safeguards, forms the foundation of defense. Parental control tools—including solutions like Kaspersky Safe Kids—allow families to limit screen time, block inappropriate content, restrict access to payment features, and track a child's location if necessary. Teaching children to create strong passwords, enable two-factor authentication, and remain skeptical of in-game promotions and gifts offers additional layers of protection.
For families who suspect their child is in danger or has experienced exploitation, Spain's 017 hotline—operated by the National Cybersecurity Institute—provides immediate, confidential support. Available every day of the year and accessible via WhatsApp or Telegram, the service connects minors, parents, and educators with specialists trained to respond to digital harassment, account theft, and grooming. The existence of such resources underscores how normalized these threats have become. Roblox remains enormously popular, and millions of children will continue playing. The question is no longer whether predators are present on the platform—they demonstrably are—but whether families and the platform itself can move quickly enough to protect the young people who inhabit it.
Citações Notáveis
Not only is content concerning, but the constant interaction between millions of anonymous users, often without filters or oversight, creates serious risks.— Marc Rivero, Lead Security Researcher, Kaspersky
There is no real verification that content is age-appropriate.— Beatriz Izquierdo, Finde esRadio
A Conversa do Hearth Outra perspectiva sobre a história
Why does Roblox specifically attract so many attackers compared to other gaming platforms?
The combination of massive daily user numbers—mostly children—and an almost completely open architecture makes it irresistible. Anyone can build and publish content with minimal oversight. That's the appeal for legitimate creators, but it's also the vulnerability predators exploit.
When you say children "lower their guard," what does that actually look like in practice?
A child receives a message from someone claiming to be another player offering free Robux or rare items. The offer feels authentic because it's embedded in the game's normal economy. The child doesn't think of it as a stranger on the internet—they think of it as a fellow player. By the time they realize they've given away personal information, the damage is done.
The platform has made recent improvements to age verification. Why hasn't that solved the problem?
Because verification is only as strong as the information provided. A child can truthfully enter their email address and still lie about their birth year. There's no way to confirm identity without invasive measures most platforms won't implement. The real solution requires constant human moderation, which doesn't scale to millions of user-created games.
What's the role of parents who don't understand gaming culture themselves?
That's the hardest position. A parent who doesn't play Roblox can't easily understand what their child is experiencing or why certain interactions feel normal to them. That's why education has to work both directions—parents need to learn the platform, not just install software and hope it works.
Is the Spanish investigation likely to change anything?
Investigations create pressure and sometimes lead to concrete policy changes. But Roblox operates globally, and enforcement varies by country. What matters more is whether the investigation forces the company to invest in moderation infrastructure that actually works at scale. That's expensive and difficult, which is why it hasn't happened yet.