Roblox has agreed to a court-enforceable plan to address ongoing child safety failures after Australia’s eSafety commission found the platform still permitted adults to contact children without parental consent. Tests revealed adults could send connection requests to Australian minors and view or respond to their posts in community forums. Underage users’ profiles, including connections and biographies, remained visible to all users with no privacy controls.
The regulator noted Roblox’s recent age-verification rollout, which started in Australia and expanded globally, but found gaps in enforcement. By mid-May, Roblox segregated accounts into three age tiers—Kids, Select, and regular—with stricter chat and content restrictions for younger users. Despite these steps, eSafety’s findings led to a binding agreement requiring Roblox to make children’s accounts private by default and block unsolicited adult contact.
Roblox must implement these changes within three months or face court action. The company is also required to improve reporting tools and undergo third-party audits of its safety measures. This follows prior lawsuits and settlements, including a $12 million agreement with Nevada in May to enhance age verification using government IDs and facial recognition.
