Home / Resources / Fake verification phishing
Guide

Is That “Verification” Link Real? Spotting Roblox Verification Phishing

One of the most common ways Roblox accounts get stolen: a fake RoVer or Bloxlink “verification” bot that links you to a phishing page.

How the scam works

You join a Discord server and a bot that looks like RoVer or Bloxlink tells you to “verify.” The link leads to a page that looks like the verification service and the Roblox login — but it’s a phishing site that captures your credentials or session, and your account (and Robux/limiteds) is gone.

How to tell real from fake

  • Real verification never asks for your Roblox password on a third-party site. Legit flows use Roblox’s own login or a code you place in your profile.
  • Check the exact domain. Real RoVer is rover.link; real Bloxlink is blox.link. Look-alikes (extra words, different TLDs) are fake.
  • Be suspicious of urgency (“verify in 5 minutes or get kicked”) — a classic pressure tactic.
  • Bot age & badges: impersonator bots are usually brand-new and lack the verified-app badge.

How VerifyUGC avoids this by design

VerifyUGC only ever verifies through official OAuth on our own domain — we never ask for your password, and account-linking happens on the real provider’s login. We also flag brand-new accounts and let you check whether a map or creator is legit before trusting them.

Know who you’re dealing with.

Check any creator or map against VerifyUGC before you trust, hire, or buy.

Create your free account