Child-Targeting Scams Add to Roblox's Safety Headwinds

What happened

The Guardian reports that criminals are targeting Roblox's young user base with scams designed to steal login credentials, in-game currency (Robux), and personal data, highlighting the platform's ongoing vulnerability to malicious actors despite existing safety measures. This development compounds the safety-driven engagement headwinds already disclosed in Roblox's filings, where mandatory age-checks and communication tiering have suppressed user acquisition and retention, contributing to a reduced FY26 bookings outlook. The company is concurrently absorbing legal settlement accruals ($57 million in Q1 2026) from multiple state actions over youth protection, and this new scam wave may intensify regulatory scrutiny and potential liabilities. Financially, Roblox remains almost entirely dependent on Robux sales, with advertising still described as 'insignificant,' so any erosion of user trust or payer conversion directly pressures the core monetization engine. The master report rates RBLX a WAIT, awaiting evidence that safety friction fades and buybacks offset heavy stock-based compensation; this scam report reinforces caution rather than providing a catalyst for re-rating.

Implication

The scam report highlights that despite age-gating and communication restrictions, the platform remains a target for fraud, which could lead to additional safety investments (raising operating expenses) and longer-term damage to user trust. Because Roblox's bookings are heavily dependent on converting a small payer base (~1.9 million daily paying users), even a modest decline in new user acquisition or payer activity from safety concerns can have outsized financial impact. The company's heavy stock-based compensation ($275 million in Q1 2026) and rising share count mean that even a well-executed buyback may not offset dilution, so per-share value remains under pressure until repurchases are actually visible. Advertising and licensing still contribute 'insignificantly' to revenue, so there is no near-term diversification to cushion against weakening Robux demand or increased safety/legal costs. Given these factors, we maintain our WAIT rating and suggest investors require either a visible improvement in age-check completion and DAU stabilization or a meaningful reduction in legal/safety contingencies before considering a more constructive stance.

Thesis delta

The Guardian report adds an incremental negative to Roblox's risk profile, confirming that safety issues extend beyond regulatory compliance to active criminal exploitation of the platform's user base. This reinforces our existing WAIT rating and may push the probability weight toward the bear scenario (30% in our base case), as persistent security incidents could prolong engagement headwinds and escalate legal/operational costs. No change to our fundamental valuation until we see evidence that the company can effectively mitigate such scams without further restricting the platform's utility.