my daughter (8 years old) had her Roblox account drained a few months ago... it was her fault, as she clicked a phishing link offering her "free Roblox" or something of the like, and she entered her credentials... I'll never forget her face when she realized what had happened ... it was heartbreaking how naive she was as I explained to her how it happened... who dafuq targets little kids like that?!