“Free In-Game Bonuses”: IDBank Warns About Cyberattacks Targeting Schoolchildren

During the summer, fraudsters shift their focus. While adults are busy with work, children spend more time online and playing video games. This is why the number of cyberattacks targeting children and teenagers increases during the school holidays. However, the criminals’ goal remains the same: gaining access to accounts, devices, and, in the most serious cases, parents’ money.

The Scam: From “Free Bonuses” to Real Financial Losses

Fraudsters target the games most popular among children, such as Minecraft, Roblox, Brawl Stars, and Counter-Strike. They operate through in-game chats, dedicated Telegram channels, and videos on TikTok and YouTube.

The most common scam scenarios include:

• “Free in-game currency” or a “rare mod.”Children are encouraged to click a link to receive free in-game currency, an exclusive game item, or a modified version of a game. The website looks authentic but is designed to steal login credentials. In some cases, instead of a link, scammers send a file that infects the child's phone or computer with malware once installed.
• “Prize tournament.”Invitations to gaming tournaments are distributed via messaging apps or videos. To participate, children are asked to send their account recovery code to the organizers. Once the code is shared, fraudsters take over the account and either demand a ransom to return it or use it to send spam messages on the victim's behalf.
• “Earn money just by playing.”In gaming chats, children are offered money for testing a new game or registering on a new social media platform. During registration, personal data is collected, after which scammers attempt to extort money from the child or their friends.
• “The admin needs to verify your account.”This scam is particularly common in CS2. A person claiming to be a server administrator contacts the child, accuses them of cheating, and asks them to download and run a "verification" program. In reality, the archive contains remote access software. Once launched, the scammer gains full control of the computer, allowing them to monitor activity, steal accounts, or even lock the device.

Important

Some scams go beyond gaming accounts. Fraudsters persuade children to take their parents' phone, open a banking app, and "help complete a payment" or "confirm a transaction." In such cases, the damage involves real money, not just in-game purchases.

In every scenario, scammers rely on a child's trust, excitement, and inability to critically assess an attractive offer from a stranger they meet online.

The Legal Trap

What makes these schemes particularly dangerous is that everything appears to have been done voluntarily by the user: they clicked the link themselves, entered their password, or downloaded the file. If a child uses a parent's phone to make a transfer through a banking app, the transaction appears to have been authorized by the device owner.

As a result, investigating such incidents becomes much more difficult, while recovering stolen funds or compromised data is often nearly impossible.

IDBank Recommends

• Teach your child one basic rule: "Free in-game currency" and other offers that seem too good to be true from strangers are almost always scams.
• Explain that files should never be downloaded through links shared in gaming chats. Mods and add-ons should only be obtained from official sources and app stores.
• Always check website addresses carefully. Fraudulent gaming websites often imitate legitimate ones but contain extra characters or slight spelling differences.
• Enable two-factor authentication (2FA) for all gaming accounts, using email or SMS verification.
• Do not allow children to use phones with unrestricted access to banking applications. Financial apps should always be protected with a separate password or biometric authentication.
• Take an interest in the games your child plays and the platforms they use. Open communication and trust are the best forms of prevention. Rather than frightening children, explain the risks and how to recognize them.

Remember: A child's favorite game can become a powerful tool for manipulation. The most effective protection is a trusting family environment, clear safety rules, and the habit of staying vigilant.

IDBANK IS SUPERVISED BY THE CBA