Market & Rates
Not every Roblox job offer is legitimate. Here are three concrete warning signs that an offer is a scam, and what to do when you spot them.
The Roblox developer job market is active, and scammers know it. They pose as recruiters, "studio leads," and "serious teams" specifically to target developers who are eager to get paid for their work. Knowing what to look for is the single most effective way to protect yourself.
Here are three red flags that reliably signal a scam.
What it looks like: You find a posting on a legitimate platform (like RoHire, DevForum, or HiddenDevs). You show interest, and almost immediately the recruiter asks you to continue the conversation somewhere else: a sketchy website, a random form, or a different messaging app you've never heard of.
Why it's a red flag: Legitimate studios don't need to move you off the platform you found them on. They have nothing to gain from it. Scammers, on the other hand, want to get you somewhere with less oversight, fewer records, and ideally somewhere that can capture your credentials or personal information.
What to do: Keep communication on the platform where you found the listing. If someone pushes hard to move elsewhere before you've even discussed the project, walk away.
What it looks like: Early in the conversation, often before any real discussion about the project, the "recruiter" sends you a file. It might be labeled as a test, a demo of their game, a required plugin, or a portfolio sample. The file is typically a .rbxl, .exe, .zip, or an unknown file type.
Why it's a red flag: This is one of the most common Roblox-specific attack vectors. A malicious .rbxl file can contain a plugin that runs on your machine and steals your Roblox session cookie, giving an attacker full access to your account without your password. Executables and ZIPs can contain keyloggers or RATs (remote access trojans).
What to do: Never open files from someone you haven't independently verified. If a studio legitimately needs you to review their game, ask for the Roblox game URL. Real games are playable in-browser; no file download required. If they insist on a file, that's your answer.
What it looks like: The offer is wildly out of proportion with the work. "$500 USD for a 10-minute scripting task." "1,000,000 Robux for a simple UI." A recruiter DMs you unprompted offering premium rates for work that should take an hour.
Why it's a red flag: Nobody pays a premium for work they could hire anyone to do. When the pay doesn't make economic sense, the job itself isn't real. The goal is usually to establish "trust" through a fake payment flow, then ask you to forward funds, click a phishing link, or hand over account credentials to "receive" your payment.
What to do: Know the market rate for your work. If an offer is more than 2–3x the going rate for no clear reason, treat it as suspect. You can browse current listings on RoHire to calibrate what studios actually pay for various roles.
Report the scammer on the platform where you encountered them. On DevForum, use the report button. On Discord, report the account to Trust & Safety. On RoHire, use the report function on the listing.
If you opened a file and suspect your account is compromised, immediately:
RoHire maintains a public scam reports database of known bad actors in the Roblox developer community. Check it before working with anyone new.
Keep reading