Ukrainian trio arrested for hijacking 610,000 Roblox accounts in $225K scheme

Lviv police arrested three Ukrainian nationals — aged 19, 21, and 22 — for compromising more than 610,000 Roblox accounts between October 2025 and January 2026, netting roughly $225,000 in resale profit. The 19-year-old ringleader recruited the other two from gaming forums and built the operation around info-stealer malware disguised as a game-enhancement tool. Once installed, the malware harvested credentials, which the crew used to take over accounts and triage them by Robux balance, inventory rarity, and limited-edition holdings.

At least 357 of the stolen accounts were classified as high-value ‘elite’ profiles, reflecting the secondary economy that has formed around Roblox’s in-game currency, tradeable items, and Roblox Studio assets. Sales moved through a Russian marketplace and closed underground communities. Ten searches across targeted locations yielded $35,000 in cash, 37 mobile phones, 11 desktops, seven laptops, five tablets, and four USB drives.

The suspects face charges under Ukrainian articles 185 (theft) and 361 (unauthorized interference with IT systems), carrying up to 15 years’ imprisonment. Investigators are still working to identify additional accomplices and victims. The case underscores how stealer-driven account takeover has matured into a structured resale pipeline targeting platforms where in-game assets carry real monetary value.