NordVPN counted 196 Roblox phishing sites in one week, some built to grab 2FA codes in real time.
Once those details have been entered, attackers may control the account.