It's easy to file each Roblox horror story under awful but rare. Read a stack of them together and the same pattern keeps showing up, which is a lot harder to wave off.
Every so often a story goes around about something terrible that happened to a kid on Roblox, and the easy thing to do, the thing I think a lot of us do without meaning to, is file it under "awful, but rare." A freak event. The kind of thing that happens to other families, in other towns, under circumstances that surely don't apply to us. I want to be careful here, because the opposite reaction is its own trap. The internet does not need another piece written to make parents panic, and panic tends to make people either lock everything down in a way that doesn't last or tune out entirely because the fear is exhausting. Neither of those actually protects anyone.
But I sat down and read through a stack of these stories recently, the actual reporting and court filings rather than the headlines, and the thing that's hard to unsee once you've seen it is how little the individual cases vary. The same pattern keeps showing up. An adult poses as a child, builds rapport over days or weeks inside the game where the kid already feels safe, and then moves the conversation somewhere with fewer guardrails, usually Discord, where images and private messages flow more freely. Robux, the in-game currency, turns up again and again as the lure, traded for photos the way a stranger might once have offered candy. That's not me editorializing. That's the shape of case after case, in different states, with different families, often described in nearly identical language by the investigators and lawyers involved.
So this isn't really an argument that Roblox is uniquely evil, or that your kid is in danger the moment they open the app. Plenty of kids play it for years and the worst thing that happens is they spend too much of your money on a virtual pet. What I think is worth holding onto is narrower and harder to dismiss: the mechanics that make this possible are built into how the platform works, the cases are numerous and consistent enough that calling them isolated is starting to feel like a comfortable fiction, and several state attorneys general and at least one short-selling research firm have now looked at the same evidence and reached versions of the same conclusion. You can decide what to do with that. I'm still working out what I think the right response is in my own house. But I'd rather decide from the real picture than from the reassuring blur.
Below is the stack I read, more or less as I found it. Some of it is straight news reporting, some is attorney general filings, some is the investigative work that kicked a lot of this into the open. I've kept the descriptions short and linked everything so you can go to the source rather than take my summary for it.
The investigations that opened it up
Bloomberg Businessweek, "Roblox's Pedophile Problem" (July 2024). The reporting that most of the later coverage traces back to. Bloomberg found that over a six-year stretch starting in 2018, more than 20 people were arrested on accusations of abducting or abusing young users they'd met through Roblox, and quoted a moderator describing hundreds of escalated child-safety reports a day.
Hindenburg Research, "Inflated Key Metrics for Wall Street and a Pedophile Hellscape for Kids" (October 2024). A short-seller's investigation, so read it knowing they had a financial bet against the stock, but the in-game findings are hard to wave off. They described an environment exposing children to grooming, pornography, violent content and abusive speech, and argued the company let engagement metrics win out over safety. The stock dropped roughly nine percent the day it published. Roblox called the financial claims misleading.
The "764" network (Washington Post, Wired, Der Spiegel joint investigation, 2024). A predator network that used Roblox and Discord to push children into producing sexual, violent, and self-harm content across the US, Germany, and Romania, linked to grooming, sextortion, suicide, and murder. As of May 2025 the FBI was reportedly tracking around 250 open cases tied to the group.
The state lawsuits
Louisiana sues Roblox (CNN, August 2025). The first state attorney general to sue. AG Liz Murrill's complaint alleged the platform facilitated the distribution of child sexual abuse material and failed to put basic safety controls in place, and pointed to games hosted on Roblox with names like "Escape to Epstein Island" and "Public Bathroom Simulator Vibe."
Florida sues Roblox (Florida AG, December 2025). AG James Uthmeier's suit alleges the company deceived parents about how safe the platform was while failing to keep kids from graphic adult content and from being contacted and groomed by predators.
Nebraska becomes the latest to sue (NBC News, March 2026). Useful as a roundup of where the litigation stood, including how lawsuits have detailed the move from Roblox onto Discord, where several suits name Discord as a co-defendant.
The individual family cases
Iowa, a 13-year-old kidnapped and trafficked (KCRG, August 2025). One of the most cited cases. The girl was kidnapped from her grandmother's home in West Des Moines in May 2025 after being groomed by a 37-year-old man posing as a teenager, then trafficked across state lines and repeatedly assaulted. The man was later charged in Tennessee.
The same Iowa case, with the internal-data angle (Milberg, November 2025). Worth its own line because of one figure from the filing: Roblox's own data reportedly showed suspected child-exploitation reports rising from 675 in 2019 to 13,316 in 2023, alongside claims that staff felt pressure to avoid safety changes that might cut into engagement.
The Iowa case follow-up, the arrest (WBIR, October 2025). Coverage tied to the suspect, Martin Amaya Sandoval Jr., appearing in court in Jefferson County, Tennessee, after the missing girl was found there.
Nassau County, Florida, attempted kidnapping of a 5-year-old (News4Jax, December 2025). A predator posing as a child groomed a five-year-old, asked where he went to school, then turned up in person claiming to be his "friend from Roblox." The boy said "you're not a kid," and the man tried to grab him.
Oklahoma, sextortion of a 12-year-old (The Oklahoman via Yahoo, August 2025). A man posing as a 15-year-old coerced the girl into sending explicit photos, then threatened to kill her family if she stopped, making clear he knew her address and that she had a younger brother. He turned out to be in his 40s with a prior record.
Doe v. Roblox / Discord, a 13-year-old boy (Anapol Weiss, February 2025). Filed on behalf of a boy who was identified and groomed on Roblox before the conversation moved to Discord, with the firm alleging Robux was used as bait. This page also collects the Hindenburg "hellscape" language in one place.
California, a 10-year-old daughter (Levy Law summary, August 2025). A mother's federal suit describing a daughter who started on Roblox at age eight and later met someone claiming to be a child, who built trust and then escalated to explicit images. This page also runs through several of the older criminal cases in one place.
Texas (Galveston), a 13-year-old girl (LawFirmNewswire roundup, October 2025). A federal suit alleging the girl met an adult on Roblox, moved to Discord, and was later assaulted in her own home, with the abuse recorded. The same roundup gathers the Georgia 9-year-old sextortion suit and the Florida CSAM case involving a 17-year-old charged as an adult.
The older criminal cases, in one place
A lot of the 2025 lawsuits lean on a back catalog of arrests going back years, and the Bear Cave compiled a good chunk of them with dates and charges. A few that recur across the filings: Clinton McElroy, a registered sex offender in Kansas who in 2020 got an eight-year-old to send explicit videos in exchange for Robux; Howard Graham, who in 2022 drove roughly 900 miles to take a 13-year-old from Topeka to Georgia; Jose Melena, who kidnapped an 11-year-old in 2021; and Ron Machluf, indicted the same year for using the chat to target several girls aged 7 to 12.
What stays with me, reading all of this in one sitting, is less any single story than the repetition: the posing as a peer, the patient trust-building, the handoff to a platform with fewer rules, the currency used as bait. I don't think the takeaway is to rip the game off the family tablet tonight, and I don't think it's to keep telling ourselves these are rare flukes that happen elsewhere. Somewhere between those two is the work, and it starts with actually knowing how the thing operates, which is what I'm trying to do here before I decide anything for my own kids.
Filed in From the Desk