NordVPN finds 196 active Roblox phishing sites in July
Security firm NordVPN reported that 196 distinct Roblox phishing addresses were active online during a single week in July 2026.
Scammers sell ready-made tools
Research from NordVPN describes an established trade in prepared phishing pages for buyers. These services provide hosting, disguised links, and tools to verify if stolen logins still work. Customers can pay using untraceable cryptocurrency to receive these turnkey solutions.
Fake pages demand extra codes
Some fraudulent login pages request more than just a password from victims. Specific scams ask for six-digit two-factor authentication codes, backup codes, and account PINs. This process allows attackers to hijack accounts in real time.
One shop offers many items
NordVPN identified one storefront that openly sells ready-made phishing pages and backup sites. The same location also offered checker tools for testing stolen account details. This single service claims to have processed more than six million logins.
Reported by one outlet
Only one outlet has published this. Nothing here has been checked against a second report, so read it as that outlet's account and follow the link below for the original.
Reported by
1 independent outlet. Headline as published. Links open the original report.