Roblox Recovery Guide

Roblox Account Hacked and They Changed the Email

Last updated: October 2026

This is the search thousands of parents and players type at midnight — and it's the case the generic advice handles worst. When the hacker changes the email, password reset is useless, but the account is not gone. Here's the exact path built for this situation.

Why password reset can't save you here

The "Forgot Password or Username?" flow sends a reset link or a 6-digit code to the email or phone currently on the account. When a hacker changes the email, that reset goes to them, not you. Clicking it over and over doesn't help — you're knocking on a door that now opens into the hacker's inbox. The moment you confirm the email on the account isn't yours anymore, stop resetting and go straight to the support ticket below.

Step 0: Clean the device first

Most Roblox account thefts start on the victim's own machine — a "free Robux" link, a malicious browser extension, or a cookie stealer that lets the thief log in as you without a password. Run a full malware/virus scan and remove any extensions you don't recognize before you recover the account. Players have gotten their accounts back only to be robbed again within days because the malware was still sitting there, watching.

Step 1: File the ticket — from the original email

Go to roblox.com/support and fill out the contact form:

1. Help Category: "Account Hacked or Can't Log In".
2. Subcategory: "Account Hacked" — or "Two-Step Verification" if the attacker changed your 2-step verification settings.
3. In the contact email field, enter the original email address — the first one ever added to the account. Not the hacker's new email, not a throwaway address. Roblox's systems retain the original email even after an attacker changes it, and filing from it (or from the billing email used for your first purchase) is the strongest identity signal you can send.
4. Enter your username exactly as it was.
5. Write the description (next section), then submit — once.

Step 2: Write a ticket that gives support something to verify

Support staff decide cases on evidence, not urgency. A ticket that says "please help my account got hacked" gives them nothing to check. A ticket that hands them verifiable facts moves. Include:

• Your username and the approximate date you created the account.
• When you lost access, and what changed — email, password, 2-step verification, missing items or Robux.
• The original email address first added to the account.
• Any old passwords you remember using on the account.
• The device you normally play on.
• A line saying you have purchase receipts available and can provide the first one on request.

Calm, factual, complete. You're building a file a reviewer can say yes to.

Step 3: Gather the proof that actually carries weight

Roblox will ask you to prove ownership. Strongest first:

• Purchase receipts — above all, the very first one. Order or invoice IDs for Robux or Premium bought by card, PayPal, Google Play, the App Store, or Xbox. Support has asked specifically for the first-ever payment on the account, so dig for the earliest receipt, not the most recent. Check old email inboxes, PayPal history, and your card or app-store purchase history.
• The original email — the first one added, or the billing email from the first payment.
• Old passwords you used.
• Approximate account creation date and the device you play on.

The 30-day clock

Roblox's documented policy: restoration of lost items or Robux (or their approximate value) is only possible if you report the compromise within 30 days. File the ticket inside that window even if you haven't found every receipt yet — the report date is what protects you, and you can add proof as support asks for it. Even in-window, restoration is not guaranteed. Treat this as one shot, and take it early.

Questions people actually ask

Can Roblox see my old email after the hacker changed it?

Yes. Roblox retains the original email address first added to the account, which is exactly why you're told to file the ticket from it. It's one of the strongest ownership signals support has.

How long does Roblox take to respond?

Roblox publishes no guaranteed timeline. Community reporting suggests allowing up to a week for a staff reply, and full restoration cases commonly take 1 to 3 weeks. Check your email — including spam — every day, and reply promptly.

The hacker changed the email and the password. Is the account gone?

No. That combination kills password reset, but the support-ticket path exists precisely for it. Your recovery rides on proof — the original email and your purchase receipts — not on the current login credentials.

Will I get my items and Robux back?

Maybe, if you reported within 30 days. Roblox restores items or Robux (or approximate value) in some compromise cases, but it does not guarantee restoration for anyone. Anyone who promises you a full restore is guessing.