Roblox Paid $36 Million to 3 States Over Child Safety. Here's What Actually Changes.

May 14, 2026·6 min read

In April 2026, three state attorneys general reached settlements with Roblox over child safety failures on the platform. The total: just under $36 million.

Nevada settled on April 15 for $12.5 million.
Alabama settled on April 21 for $12.2 million.
West Virginia settled on April 21 for $11 million.

And that is not the end of it. Five more states have active cases still working their way through the legal system: Florida, Iowa, Kentucky, Louisiana, and Texas.

For parents, the dollar amounts are less relevant than the question underneath them: what did Roblox actually agree to change? The settlements include specific operational requirements, not just a check. Understanding what Roblox committed to can help you know what to expect on the platform going forward, and where the gaps still are.

What the Investigations Were About

All three cases arose from similar allegations: Roblox failed to verify the ages of its users before exposing them to chat and social features, failed to provide parents with meaningful control over who could interact with their children, and allowed adults to contact minors without restriction.

Roblox has over 150 million monthly users. A significant portion of them are under 13. For years, the platform's default settings allowed any registered user to send messages to any other user, with limited age separation between adults and children. The AG investigations found that this created conditions where predatory behavior was predictable, not just possible.

The settlements did not include admissions of wrongdoing from Roblox. But the company agreed to implement sweeping changes as conditions of the deals.

Three Things Roblox Agreed to Change

The settlement requirements fall into three categories. A privacy law analysis from Sheppard Mullin, a firm that tracks children's privacy enforcement, summarized them clearly: age verification, parental controls, and restricting adult interactions with children.

1. Age Verification Before Chat

Under the settlement terms, Roblox must verify every user's age before allowing them to access chat features. This includes using facial age estimation technology or government-issued ID confirmation for users who are close to age boundaries.

Users under 16 will be defaulted to a "safe content" mode. This is a significant shift from the previous model, where users could self-report their age at account creation with no verification step.

Roblox is also required to monitor existing accounts to identify users who may have entered an incorrect age when they signed up.

2. Expanded Parental Controls

The settlements require Roblox to give parents the ability to select who their children can interact with in chat, rather than offering only a blanket on-or-off toggle. Parents will also be able to restrict their children's ability to spend in-game currency to trusted adults only.

Some of these changes have already rolled out. Alabama AG Steve Marshall noted at the time of the settlement announcement that certain features had been implemented before the settlement was finalized, which he said showed that Roblox was moving in good faith.

3. Adults Cannot Reach Children Unless Added as a Trusted Friend

This is the most significant structural change. Under the new terms, adults are "fenced" from interacting with children under 16 unless they are designated as a trusted friend. The trusted friend verification process depends on the child's age:

Children under 13 require parental consent to add any trusted friend.
Children between 13 and 15 can add trusted friends using a phone contact importer or a QR code, limiting connections to people they already know in real life.

Roblox is also ending encryption on chats for minors, which makes it possible for the platform to monitor conversations for safety violations rather than treating them as private.

Five States Are Still in Court

Settling with three states does not put the legal pressure behind Roblox. At least five states have active litigation ongoing:

Florida: The state filed suit alleging Roblox misrepresented the safety of its platform to parents.
Iowa: Iowa's AG sued Roblox for endangering children on the platform.
Kentucky: Kentucky has an active case in progress.
Louisiana: Louisiana filed suit in 2025, with allegations focused on exploitation risks.
Texas: Texas filed its own lawsuit and survived Roblox's attempt to have it dismissed. The case is proceeding.

Sheppard Mullin's analysis notes that these pending cases will likely follow the same template as the three settlements: pressure on age verification, parental controls, and adult-to-minor contact restrictions. Companies that interact with children online, the firm advises, should treat the settled cases as a preview of enforcement standards nationwide.

What the Settlements Still Don't Fix

The changes Roblox agreed to are meaningful. Better age verification and a genuine trusted-friend model for adult-to-minor contact are real improvements over the previous defaults.

But the settlements address restriction, not visibility. When you look at what Roblox is committing to, almost none of it gives parents the ability to see what is actually happening on their child's account.

You will have better control over who can reach your child. You still won't be able to see:

Who your child has actually added as friends, and when
Which games they are playing, and with whom
How much time they are spending on the platform each day
Whether their spending patterns have changed
When they are online and for how long

Roblox's native parental controls, even updated, are built around locking things down. They are not built around helping you stay informed. Those are two different things, and the second one is what most parents actually want.

That is the gap BloxWatch was built to fill. It connects to your child's Roblox account via the platform's own API, with no device software to install, and gives you a real-time picture of their activity: friends, games, online time, and spending. Not surveillance. Just the information you would have if Roblox's own interface showed it to you.

What Parents Should Do Right Now

Even before all of Roblox's settlement commitments are fully in place, there are steps you can take today:

Log into the Roblox parental dashboard at roblox.com/parents and check your child's current privacy settings. Some of the new controls may already be available.
Turn on the contact settings that restrict who can message your child. Even without trusted-friend verification fully rolled out, you can limit contacts to friends-only.
Talk to your child about the trusted friend list. The new model makes friend verification a conversation you can have together, rather than a setting you set and forget.
Ask about their friends list. The settlements require Roblox to restrict adult access, but they don't remove connections that were already made before the changes. If your child has been on Roblox for years, the existing friend list is worth reviewing.

The $36 million in settlements signals that enforcement on children's online safety is getting serious. But legal settlements change policies, not culture. Parents staying informed is still the most effective protection.