Gaming Scams Kids Run Into: A Parent’s Guide to Safer Choices

When a game-related message asks for a password, a verification code, an unfamiliar download or money outside an official purchase route, stop and check it with an adult. The child does not have to decide whether the sender is “really” a friend, creator or staff member before refusing the request.

A useful family rule is simple: offers can wait; account access stays private. If the child has already clicked or shared something, move straight to recovery rather than making them defend the mistake.

This guide uses official platform and US consumer-protection sources checked September 15, 2026. The examples are illustrative, not reports of specific families or claims about how often each scam occurs.

Teach the request, not just the scam's name

A message may promise a prize, claim an account is in trouble, or imitate a familiar organization. The FTC explains that phishing uses a convincing story to obtain personal information or get someone to open a link or attachment. It recommends checking through a contact route you know is real rather than using the suspicious message's details. FTC phishing guidance

For a child, turn that into three questions:

• What am I being asked to give or do?
• Can I check this inside the official app or site without following the message?
• Which adult can help me check before I continue?

Good spelling, a recognizable logo, or a familiar display name does not answer those questions. Avoid making a child memorize an endless list of suspicious-looking websites. Teach them to stop at the request.

Practice three scenarios without opening real links

The currency offer

Illustrative message: “You can get a large bundle of game currency if you sign in on this page.”

The important step is to avoid the offered page and ask an adult. Roblox specifically warns about purported free Robux and subscription generators intended to obtain account details or send users to harmful links. Roblox's generator warning

Epic also warns against unofficial offers for V-Bucks or other items and says not to enter login information on outside sites. Epic account security guidance

Do not generalize that warning into “every free item in every game is fake.” Official promotions and unauthorized requests are different. The family should check the offer through the platform's own channels.

The urgent account warning

Illustrative message: “Your account will be removed unless you send the code that just arrived.”

The child can stop responding and ask an adult to check the account through its normal sign-in route. A security code is not a prize-claim detail to send to another player.

Practice a brief response—or no response at all. “I'm checking through support” is enough if the child wants words to use. They do not need to convince the sender or race a countdown.

The FTC's examples include false warnings about account or payment problems. That is why the independent check matters more than the message's urgency. How phishing messages create pressure

The favor from a familiar name

Illustrative message: “Let me use your account for a minute so I can add the item.”

The family rule can remain the same even when the name is familiar. Do not hand over the account. A conversation about a gift can happen without sharing credentials.

Epic says account buying, selling and sharing violate its terms, and that it will not ask for a password through messages, email or third-party sites. Epic's account-sharing and phishing rules

Help the child separate refusing a request from accusing a friend. “I don't share my login with anyone” states a boundary without requiring an argument about who sent the message.

Use a small pause-and-check card

Keep this beside the device or in a family note:

Pause: Do not enter information, download anything, send money, or continue the conversation.

Check: Open the known official app or website independently with an adult.

Decide: If the offer cannot be verified, leave it alone. Use the service's reporting tools when appropriate.

Tell: Ask for help immediately if anything was already shared.

Use the card for a brief offline rehearsal. Invent a harmless message together rather than searching for a live scam to test. Let the child explain which part makes them pause. The goal is a repeatable action, not a score.

If the child already responded

Start by finding out what happened: viewed a page, downloaded a file, entered a password, shared a code, or made a payment. Those situations need different responses. A click alone does not establish that every account is compromised.

If credentials were shared and the account is still accessible, the FTC recommends a new strong password, changes anywhere the same password was reused, and two-factor authentication. If access is lost, follow the service's official recovery route. If money was sent, contact the relevant payment provider promptly and ask about recovery; reimbursement is not guaranteed. FTC recovery guidance

For a suspicious download, get help checking the device through a trusted support route. Do not let the sender “repair” it remotely. Keep relevant receipts and account notices without publishing the child's private information.

Report the attempt through the platform's genuine reporting process. Roblox identifies its Report Abuse tools for suspicious messages, links and experiences. US families can also report fraud through the FTC's recovery and reporting guidance.

Make the ordinary account setup easier to protect

Use unique passwords and the platform's available stronger sign-in options. Secure the recovery email too. Epic emphasizes access to a long-term email address and protection for linked accounts, since they can affect access to the game account. Epic's security checklist

Check this quietly with the child; do not ask them to read passwords or recovery codes aloud in a group. Agree where the family will keep recovery information securely and who helps if access is lost.

End with a practical promise: “Tell me quickly, even if you already clicked.” Keep any later discussion about spending or screen-time rules separate from the immediate recovery work. For pressure that starts in a game conversation, practice the exit scripts in our online chat safety guide.