Roblox has become the first platform to undergo independent audits under the UK’s Online Safety Act, yet Australia’s eSafety commissioner Julie Inman Grant reports persistent gaps in its safeguards against adult predators. Testing conducted earlier this year revealed that adults can still send connection requests to children, whose profiles and biographical details remain publicly visible by default.
The audit flagged that these requests do not trigger parental alerts, and bad actors can scan children’s public contact lists to identify additional targets. eSafety’s findings suggest Roblox’s recent changes, implemented last fall to restrict direct messaging between unknown adults and children, have not fully addressed the risks.
In response to the report, eSafety has demanded Roblox make further changes to restrict profile visibility and alert parents to suspicious connection attempts. The platform has not yet commented on the specific demands or a timeline for compliance.
