They provide a link to a file-sharing site (like MediaFire or Mega) to download "Free Robux.zip."
The ZIP may contain .exe , .js , or .bat files that, once run, can install viruses, spyware that watches your keystrokes, or ransomware that locks your personal files [1]. Free Robux.zip
The user is told to disable their antivirus (claiming it's a "false positive") and run the file inside the ZIP. They provide a link to a file-sharing site
Most of these ZIP files contain "cookie loggers" or "token grabbers." These scripts steal your Roblox login session (cookies), allowing a hacker to log into your account without needing your password or 2FA [1]. Ensure you have 2FA enabled on your Roblox
Ensure you have 2FA enabled on your Roblox account to provide an extra layer of protection, though note that session stealing can sometimes bypass this.
If a "Free Robux" download tells you to turn off your security settings, it is a virus.
Once opened, the malware runs in the background. The user sees nothing happen, but their account information is already gone. How to Stay Safe