User blog:Acebatonfan/Roblox character decal scams - How to actually get your avatar texture

Hi, everyone! It's your *favorite* admin again! I've personally noticed a new scam around Roblox that is really easy to fall for. The scam happens this way:
 * A player will send you a message saying that they want to use your avatar for a game/GFX/etc. They will tell you that they need a decal or an image of your Roblox avatar's clothing texture . They will include a youtube video link showing you how
 * The Youtube video will instruct you to copy a piece of JavaScript into your URL bar. This "code" will send you to an image of your avatar's texture, but it also will send your .ROBLOSECURITY and other cookies /data to the scammer!
 * By sending the cookies to the scammer, it allows them to be able to log into your account and bypass needing a password or 2-factor authentication! You can lose your items and/or your entire account by falling for this scam.

How do I safely get my texture?

 * 1) First off, make sure your character is in R6 and not R15. You can change this under your Avatar editor page.
 * 2) Open Roblox Studio. To make it easier, choose a blank game template, such as one with just grass or a big baseplate.
 * 3) Click on the "Play" button on the top bar. This will place your Roblox character in the game, as if you were actually playing it.
 * 4) On the right side of your screen, you'll see a bunch of stuff under a heading called Explorer. Click on the Workspace sub-heading. The workspace is -simply- where all the bricks (including your avatar) are located.
 * 5) Once you open the workspace, you'll see one that has your character name. Click on that, and it'll drop down all the bricks and pieces needed to form your Roblox avatar.
 * 6) Right click on your avatar name, and click on "export selection". This will save an .obj model of your Roblox avatar to your computer. Save it as a name you will remember
 * 7) Go to your file explorer and to your Roblox folder (this is most likely in your documents section). In that folder there will be a .png file (an image file). Double click on that, and it'll be your avatar's texture.
 * 8) You can then upload this image as a decal or use it in a 3D modeling program like Blender and Paint3D.  If you're really creative, this is also a fun way to make GFXes of your avatar.

To make things easier, I have also included a step-by-step image guide

What can I do to keep my account secure?
As always, the best thing you can do to keep your account safe is to have a secure account, and Roblox has numerous features for your to keep your account secure.
 * Use a good and strong password. Your name or other easily-guessable stuff is not a good idea. It is also a good idea to have a password you use only for your Roblox account. Use upper and lower case letters, numbers, and special characters such as !, ?, $, &.
 * Have your account verified and linked to your email and/or phone number. This will allow you to change your password should you forget your password.It also lets you know through email when there is a new login session. Being verified helped me a few months ago when a password guesser tried to reset my password, but didn't know what my email was; I got the email saying I asked for a password reset and was able to quickly change my password to a stronger one and make sure my account stays as secure as possible
 * Enable 2-factor authentication. This is one of my favorite features. If your account is logged into from an "untrusted" location, you will be required to enter in a code sent to your email in order to get to your account. That way, if someone has your password they can't get in unless they can also access your  email to get the 2FA code (this is why I recommed having a password unique for Roblox).
 * Have an account PIN. This is the last thing to protect your account and is important if you end up falling for a scam that allows the scammer to get into your account through your cookies. The account PIN is what locks your account settings, like your password and email, from being changed without providing a four-number code. It's definitely not a good idea to use 1234, 0000, etc., but having a strong PIN that only you know is the easiest thing you can do to protect your account.