Robux is a server-side currency. It cannot be added to your account by running a file on your computer [1].
Ensure you have 2FA enabled on your Roblox account to provide an extra layer of protection, though note that session stealing can sometimes bypass this.
Legitimate ways to earn Robux (like creating games or clothing) happen within the official Roblox platform, not through external ZIP files.
The ZIP may contain .exe , .js , or .bat files that, once run, can install viruses, spyware that watches your keystrokes, or ransomware that locks your personal files [1].
Once opened, the malware runs in the background. The user sees nothing happen, but their account information is already gone. How to Stay Safe
If a "Free Robux" download tells you to turn off your security settings, it is a virus.
Some files contain programs that ask you to "log in" to receive the Robux. Any information you enter is sent directly to the scammer.
The user is told to disable their antivirus (claiming it's a "false positive") and run the file inside the ZIP.