In the depths of the Roblox criminal Discord network, a scammer from across the void shows me his best score. A screenshot materializes in the chat — it contains the uncensored username, password, and IP address of a Roblox account that was allegedly captured in his snare. There were 467,985 Robux in the target's wallet at the time of the hack, equivalent to about $5,850.
"I scripted something called a pin cracker. I run it, crack their pin, and it auto-unverifies their email," says the scammer, when I ask how they prevent their victims from reclaiming their Roblox identity. "They get logged off, and I change everything."
Could it really be that simple? I didn't know what to believe. The panels of these Discord servers bloom with...