An email-change alert needs context. If you just updated your Roblox address, the old inbox is expected to receive a notification. If you did not make the change, open Roblox directly and review the account rather than treating the message as routine. Roblox confirms that former email addresses receive change alerts. Roblox: How do I change my email address?.
Start with one question: did you, or the parent legitimately managing the account, request this update? Check that before deleting the alert or repeatedly trying password resets.
If you made the change
Roblox’s documented update process asks for the new address and current password in Account Info, then sends instructions to the new inbox. Roblox: How do I change my email address?. Finish those instructions and review the address on the account.
Do not confuse the message sent to the old inbox with confirmation at the new one. Keep both inboxes available until you understand the outcome. Once the account shows the intended address, update your private account notes so future recovery attempts use the correct contact.
If the confirmation is missing, use the email troubleshooting guide. Explain which inbox received which message. That distinguishes an incomplete update from a change you never authorized.
If you did not make the change and can still sign in
- Open the official Roblox app or website independently.
- Check the account identifier so you are reviewing the affected account.
- Record what the account currently shows and what the alert says changed.
- Secure the account using the relevant settings and available verification methods.
- Review other access and prepare a concise incident note.
Roblox allows a signed-in password change in Account Info using the current password and the replacement twice. Roblox: How do I change my password?. Use a password that belongs only to this account, and do the work on a device you trust.
Our hacked-account first steps cover the wider response. Changing a recovery address back without considering how the unauthorized change occurred may leave an important part of the problem unresolved.
If your former email no longer receives recovery mail
Roblox sends password-reset instructions to the address currently associated with the account. Roblox: I Forgot My Password. That explains why repeatedly requesting a reset may not reach the inbox you used before an unauthorized change.
Write down whether you still have a working session, whether the password is accepted, and which recovery methods remain available. These observations help you choose between an account-setting fix and a recovery request.
The first email or first-payment billing email can help Roblox investigate ownership after compromise; recovery remains uncertain. Roblox: My account was hacked – What do I do?. Keep these records private.
A delayed-action alert is a separate warning
If Roblox shows a Delayed Action request you did not initiate, its documented rejection option signs out the suspicious session. Roblox: Delayed Actions. Use the genuine notification or review the account through the official app.
Distinguish “a change has happened” from “a sensitive request is waiting.” The first describes an account state to investigate; the second may give you an opportunity to reject a pending action. Save the exact wording so you do not report a pending request as a completed loss.
Prepare a clear report
A useful incident note has four parts: the username, when you noticed the alert, whether you requested the change, and what access remains. Add a short record of your own actions afterward. Keep guesses about another person’s identity separate from things you observed.
For example, “I received an email-change notice that I did not request. My old address no longer receives the reset message, but the app on my phone is still signed in” gives a clear starting point. Replace that example with your actual situation; do not add details merely because they sound persuasive.
Use the support-contact guide if account access or ownership needs investigation. The goal is to restore a trustworthy recovery arrangement, not just make the alert disappear.
Official sources reviewed September 13, 2026. This guide is based on documentation research, not a claim of hands-on testing. Qrajo is independent of Roblox. Featured artwork is an original illustration. Read our editorial policy.
