Never allowed
Refused without exception. Each one puts either our payment processing or our sellers' Roblox accounts at risk.
- Roblox accounts. Selling, trading or renting an account, including "aged" or username-only accounts.
- Robux. In any direction, at any rate, including group-funds transfers dressed up as payment.
- Limiteds and collectibles. Any item that lives in a Roblox inventory.
- In-game items or currency. Anything that only exists inside a running experience.
- Stolen or free-model-derived assets. If you did not make it, or you pulled it out of a free model, it is not yours to sell.
- Backdoored code. Enforced automatically as well as by hand. See the next section.
- Exploits, cheats and bypasses. Including anti-cheat bypasses, executors, and anything intended to break another game.
- Services rather than files. Commissions, "I will build you X", and any arrangement completed after the sale. RoAuction sells finished work only.
Code we reject automatically
Every uploaded file is hashed and scanned before a listing goes live. The rules are published so you can check your own file first. A rejection is a pattern match, not a judgement about you.
require() calls pointing at an external asset IDInsertService:LoadAsset on a hardcoded asset IDloadstring over an HTTP responsegetfenv / setfenv environment indirectionAny reference to the .ROBLOSECURITY cookieObfuscated or minified Lua that cannot be read
Obfuscation is not protection here
If a buyer cannot read what they bought, neither can we. Minified or obfuscated Lua is refused even when it is harmless.
Files we cannot read at all, such as binary models and packed archives, are not rejected automatically. They go in front of a human before the listing goes live.
You must own what you sell
By listing, you state that the work is yours, that you have the right to sell it, and that you are not redistributing anything under a licence that forbids it.
- Assets pulled from the Roblox library, from other marketplaces, or from another developer's game are not yours, even if you modified them.
- Third-party libraries may be included if their licence permits redistribution. Name them in the listing description.
- AI-assisted work is fine. AI-generated copies of somebody else's specific asset are not.
- An exclusive listing additionally means you will never sell, reuse or relist that work, and that you will remove public copies within seven days.
Why these rules exist
Two reasons, and both are worth being direct about.
Payments. Selling in-game items or currency puts a marketplace in a restricted category with card processors. Losing processing is not a warning: the site stops working and every pending payout freezes.
Roblox. Real-money transactions for in-experience items break Roblox's own rules, and it is the seller who loses their account, not us. Dev files sold off-platform sit outside that entirely.
Reporting a listing
If you recognise your own work in someone else's listing, use the DMCA process. It is faster and it produces a record. For anything else, email support with the listing URL and what is wrong with it.
On stolen-asset reports we remove first and argue afterwards. A seller removed in error loses a few days; a buyer who receives stolen code can lose their game.