Ukrainians charged for hacking 610,000 Roblox accounts and selling them to Russian buyers
Roblox wasn’t just a game for the scammers.
One of the arrested Ukrainians. Image by Lviv Regional Prosecutor's Office.
- Ukrainian prosecutors charged three nationals over the theft and sale of more than 610,000 Roblox accounts.
- Investigators say the suspects used stolen session tokens to enter accounts without passwords.
- Valuable accounts were sold individually, while cheaper accounts went in bulk on Russian online platforms.
- Prosecutors say the scheme generated about €390,000; all three suspects are in custody.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
Three Ukrainian nationals are being accused of stealing and selling access to more than 610,000 Roblox accounts to Russian buyers via online platforms.
The scheme was organized by a 19-year-old resident from Drohobych, who recruited 2 associates, both aged 22.
The key suspect assigned tasks to all participants, managed account sales via a website and Telegram, paid for servers, distributed profits, and personally assessed the value of Roblox accounts.
The 2 co-conspirators used specialized software to check accounts, administered the sales website and Telegram channels, posted advertisements, communicated with buyers, and handled the storage, withdrawal, and laundering of funds.
Between May 2025 and April 2026, the suspects managed to obtain data belonging to over 610,000 Roblox users.
To pull this off, the perpetrators stole session tokens, allowing them to log into other people’s accounts without passwords. Once they were successfully logged in, they assessed the account's value by reviewing the number of in-game items, rare gear, and virtual currency balances.
Valuable accounts were sold individually at fixed prices, while the rest were sold in bulk or at a discount. The accounts were sold on Russian online platforms, and payments were made using cryptocurrency wallets.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.
Some accounts were sold for approximately 70 Russian rubles. According to the prosecutor, the suspects generated around €390,000. Investigators traced about €45,000 in cryptocurrency proceeds that had been converted into Ukrainian currency and were transferred to the suspects’ bank accounts for personal use.
When law enforcement officers searched the suspects’ houses, they seized computers, storage devices, mobile phones, bank cards, handwritten notes, drugs, and cash.
All 3 suspects are currently in custody and face charges including theft and sale of access information, unauthorized interference with computer systems, and money laundering.
