Roblox Age Verification Face Scan: Hijackers Keep Kid Status

Roblox's face scan can decide your kid is a kid. But it never actually remembers whose face it was. So if someone takes over that account, the child's verified age status goes right along with it.

If your child plays Roblox, or you've ever held

If your child plays Roblox, or you've ever held your phone up to scan your own face, this one touches your life. Handing a camera to a company and hearing "it's for safety" can feel uneasy. That worry is fair, especially when kids are involved.

So today we'll look at what the scan actually does, what happens to the picture afterward, and where the real weak spot hides. Because it isn't where most parents are looking. So how does a face scan work if it isn't storing your face?

Start with what the scan is trying to do. It isn't trying to figure out who you are. It's trying to guess roughly how old you are.

According to Roblox, the system looks at a photo and a short video of your face. It then sorts you into one of six age groups. Five to eight. Nine to twelve. Thirteen to fifteen. Sixteen to seventeen. Eighteen to twenty. And twenty-one and up.

That's a very different job from facial recognition

That's a very different job from facial recognition. Recognition turns your face into a mathematical map, then matches it against a database of other faces. Age estimation looks for signs that track with getting older, like skin texture and bone structure. It doesn't build a map that could pick you out of a crowd later.

Here's the path your face takes. You scan it with your phone's front camera. A third-party company called Persona, which handles identity checks, runs the estimate. Then the image and video get deleted, and Roblox keeps only the age group.

One caution. Some outside documentation mentions a thirty-day retention window at Persona. Roblox and Persona both say the data is deleted right after processing. So the retention details are worth checking in Roblox's own help pages.

This is where a common fear shows up. Many parents assume Roblox is building a database of children's faces. That's an understandable guess, because "face scan" sounds exactly like airport surveillance. But by Roblox's account, the company keeps a verdict, not a face.

Picture a border agent who studies your face,

Picture a border agent who studies your face, decides you're over eighteen, and then shreds the photo. She writes "eighteen plus" on a sticky note and waves you through. She couldn't pick you out if you came back tomorrow.

That protects your privacy. But the sticky note is the only thing left. And anyone holding it gets treated the same way.

Now, how accurate is the guess? Roblox says its estimate lands within about two years. That sounds precise until you picture it. A fourteen-year-old might be treated like a twelve-year-old, or like a sixteen-year-old.

It gets harder. Regulators and researchers say age estimation is least accurate for teens and young adults. That's exactly the group these checks matter most for. Faces change fast during puberty, and there's less of the aging signal for a system to read.

There's also a check to make sure a real person is

There's also a check to make sure a real person is in front of the camera. The app asks you to move your face in certain directions. According to reporting from CNN, it also watches for oddities, like the same face being used again and again.

So for parents, the takeaway is simple. The scan is a rough sort, not a perfect lock. And for the rest of us, any app that says "we checked your age" is making an estimate, not a certainty.

How widely is this used? TechCrunch reported that forty-five percent of Roblox's daily users had completed an age check by January thirty-first, twenty twenty-six. That's a lot of kids. It also means more than half hadn't, which suggests people are skipping it or avoiding it.

The scan secures the gate. It doesn't secure the account. If someone hijacks a verified child's account, they inherit that child's age status, and they blend right in.