If you are wondering how to keep my child safe on online games, you are not alone, and you do not need to be a gamer to get it sorted. I spend my days explaining scams and online risks in plain English, and the same few habits cover most of what goes wrong. This guide is the version I would give a mate over a brew.
Most games are fine. The trouble comes from the chat, the shop and the offers that pop up around them. Here is what I would check first.
What actually goes wrong when kids play online
The Internet Matters guide to online gaming lists the main risks as contact with strangers, bullying, unsuitable content, in-game purchases and loot boxes, personal data collection, and scams or malware hidden in "free" games. That list is a good map of where to look.
Strangers in the chat
The CEOP Education page for parents says children can end up talking to people they don't know, including adults trying to groom them. Live chat is not always moderated either, so a child can see swearing, sexual language or bullying. Another thing CEOP flags: a conversation being moved to another app with no moderation, then used to push a child into sharing photos, video or personal details.
Gifts, trades and in-game currency
Skins, game currency and weapons give a player status, so a gift or a trade feels friendly. CEOP says gifts and trades are not always a sign of grooming, but offenders can use them to build a close bond. If someone is offering your child items and then asking for a webcam, photos or a move to another app, that is the moment to step in.
Chat settings to keep my child safe on online games
Settings do a lot of the work for you. Internet Matters has step-by-step guides for each device, so use those rather than hunting through menus.
Give each child their own account
Internet Matters suggests setting up a separate account for every child, matched to their age, through the console's Parental Controls or Family Settings. Do this when the device is new. It is much harder to tighten things up later once they are used to having the lot switched on.
Use friends only and mute
Most games let you play in a private lobby with friends your child knows in real life, and let you mute other players. Switch both on. Internet Matters also suggests setting up the PlayStation or Xbox community apps, so you get alerts about direct messages sent to your child's account.
Teach them to block and report
CEOP says to make sure your child knows how to block and report other players. Show them where the button is, then do it together once so it is not a scary new thing the first time they need it.
How to stop in-game spending running away
Game shops are built to make spending feel small. A few pounds here and there adds up, and some children don't realise it is real money.
Agree up front whether in-game purchases are allowed. CEOP recommends deciding this before the game is downloaded.
Use parental controls so purchases need your approval, or set a spending limit.
Link the console to an email address you actually check, so purchase alerts reach you.
Use a gift card with a set amount instead of attaching your bank card.
The gift card option is the simplest. When the credit runs out, it runs out.
Free Robux and other "free currency" scams
Kids want game currency and scammers know it. A WeLiveSecurity article from ESET, published 22 September 2026, explains how the free Robux scams work and what is real.
How the scam works
Fake giveaways, "free Robux" generators and lookalike login pages are the usual tricks. A generator asks for your username, then wants you to complete surveys or download software, which can collect personal details or hide malware. Phishing pages copy the Roblox login to grab the password. You also see fake giveaways on YouTube, TikTok and Discord with dodgy links, and limited-time offers designed to rush a child into clicking.
What is real
Roblox itself says there is no such thing as free Robux, subscription tricks or codes. The article points out that genuine routes are official promotions, buying through Roblox, or gift cards. So the rule for your child is simple: the only place to enter a Roblox password is Roblox. If you want a refresher on spotting this kind of message, my guide Is this text a scam? uses the same checks.
It also helps to give each game account its own strong password, because a stolen password gets tried everywhere else. I explain how I build one in the method I use to build a password worth trusting. If you would rather not remember a pile of them, a password manager like NordPass can do it for the whole family. Try NordPass here. Some links on this site are affiliate links. If you buy through them I may earn a commission at no extra cost to you.
House rules that make a difference
Rules work best when your child helped write them. Sit down and agree a few: playing time, which games are allowed, whether in-game purchases are allowed, and where they can play.
Keep the console where you can see it
Internet Matters suggests keeping consoles and computers in a shared family area. For younger children, CEOP suggests playing in a shared space or the same room. Every so often, ask your child to use the speakers instead of the headset so you can hear what is being said.
Play with them now and then
Joining a game on their account shows you who they are talking to. It also tells your child you are interested, not spying. Check the PEGI age rating and content descriptors too, and remember a game rated for their age can still frighten them.
What to do if something has already gone wrong
First, don't blame your child. CEOP is clear that children are never to blame for online sexual abuse, and the WeLiveSecurity article says the same about scams: listen, reassure, then fix it. If a child feels they will get told off, they stop telling you things.
If a stranger has been messaging your child
Block the player first. If a child is in immediate danger, call 999. Otherwise you can report online child sexual abuse through CEOP's reporting form, or contact your local police force. CEOP's parents' page also has a "Get help" section for you and your child.
If the account has been hacked or money has gone
The WeLiveSecurity article gives a clear checklist for a scammed child's account:
Change the login details, including anything else that used the same password.
Switch on two-factor authentication.
Check the recovery email has not been changed.
Review any linked payment methods, and ring the bank if money has gone.
Scan the device with a reputable security tool if you think malware is involved.
If the scam cost real money, report it to Report Fraud. My guide on the first things I do the moment I suspect a scam walks through the order I would do things in.
Keep reading
This guide is part of Kells Security Solutions, where I explain online safety in plain English. Next, have a look at two related guides: the online shopping routine I follow from search to delivery and the difference between phishing and every other scam I deal with. If something has already gone wrong, here is the guide to where to report a scam. You can also grab my free online safety checklist or have a look at the Safety Toolkit.
