I'm facing issues with unauthorized data disclosure after selling my old ROBLOX account.
I'm facing issues with unauthorized data disclosure after selling my old ROBLOX account.
I’m uncertain if this is the appropriate place for this discussion, so please let me know if it doesn’t belong here. I’ll remove this thread and move it to Off Topic.
I recently faced financial difficulties and chose to sell my old ROBLOX account. As a teenager, I invested a lot of time and money in ROBLOX, making it somewhat valuable. However, as I’ve grown older, I no longer feel connected to ROBLOX, so I decided to part with my account.
I joined a Discord server that claimed to be a ROBLOX marketplace and quickly met people interested in purchasing my account. I sold it for $50, but things took a turn about a week later. It seemed the buyer had performed some "secretive actions," and ROBLOX reset my email address to mine, requiring me to change the password. I completed that process for him, provided the new password, and assumed his intentions were purely business-related without much concern.
Around a week after that, he claimed he had lost the password and accused me of stealing the account. I clarified that I hadn’t stolen it, and he retaliated by accusing me of lying.
Here are the chat logs:
Also, I shared the account details linked to the email associated with it.
We had a series of arguments until this incident occurred:
The person who accessed the account changed its phone number, preventing me from receiving a verification code. I repeatedly tried sending it, but it never arrived.
Then he sent me a message containing my full name, which he obtained from PayPal payments. My unique name matches the town listed in public high school honor roll documents, and his address is tied to a PayPal transaction.
That’s when I became increasingly uneasy.
After receiving the screenshot, he provided more details and threatened to disclose information without my permission multiple times.
I offered to refund him, but he declined. I also shared the screenshot with him. Unintentionally, I omitted the phone number from two of my contacts in the image, which he used to prove I hadn’t received the code. He later messaged them and spread false rumors about me.
Once I shared the password in a group chat, he had a friend who paid for it. That friend was the other individual in the group.
That’s the final message I received from that person.
He possesses a significant amount of my information, and I’m genuinely worried about potential consequences.
What should I do?
This individual has shared a lot of personal details about me and is threatening to expose my information publicly. I'm completely unfamiliar with this scenario and unsure of the best way to handle it. I shared this discussion in the hope of finding guidance on how to deal with such a situation.
Dox suggests you kept that information confidential, but it's evident you didn't because it appears on your Paypal account, which was your preferred payment method.
I was surprised by how little I could achieve with the ROBLOX community, but I wasn't sure they would share my boss's phone number from a screenshot and accuse them of scamming. I haven't been fired yet, but I don't expect that to change. My boss is aware of the situation, which is definitely not ideal.
Selling your account is generally against the terms of most games, though I think it probably wouldn’t lead to serious consequences. If that were your case, I’d likely reach out to the local authorities and inform them about the situation. They probably won’t take much action, but at least they’ll be aware. If the person attempts to terminate your account or harass you seriously, the police can intervene and assist you.
Get frustrated with the need to record this.
If it escalates, the documentation might be valuable in court, allowing them to obtain a search warrant for Discord to retrieve his IP, then reach out to his ISP to find the linked address, identify his identity, which could prove useful.
Of course we haven’t reached that stage yet, but I think it’s still wise to contact them now just in case.
Currently, probably nothing. However, if the person acts foolishly, they might get caught.