Poppy Playtime Chapter 5: What Launched With the Game

Within 24 hours of Poppy Playtime: Chapter 5 going live on Steam, scam infrastructure was already in place. A five-day monitoring operation tracked what that looked like — and what it means for the children playing on Roblox right now.

Intelligence source: This post summarises findings from a five-day OSINT monitoring operation (18–22 February 2026) conducted by a DigiShield Kids researcher. Full methodology and dataset available on request.

Poppy Playtime: Chapter 5 — Broken Things launched on 18 February 2026, and it was, by any measure, a major event. The franchise has accumulated over 50 million players worldwide since 2021, and Chapter 5 more than doubled the series' previous peak concurrent player record on Steam. It topped the global sales chart on launch day.

That scale matters for one reason above all others: where children's attention concentrates, fraud follows. The monitoring operation began at launch and documented what happened across five days.

52,866
Peak concurrent players on launch day — more than double the previous franchise record
12+
Distinct fake download sites identified within five days of launch
0
Official mobile versions of Chapter 5 — making every APK download fraudulent

The fake mobile download problem

Chapter 5 is a PC-only release. Console versions are planned for later in 2026. There is no official mobile version — not on Google Play, not on the App Store, not anywhere.

That fact renders an entire category of scam completely unambiguous: every single APK download site offering Chapter 5 for Android is fraudulent. No exceptions. Several of the sites identified during the monitoring period explicitly instructed users to disable Google Play Protect or their antivirus software before installing — a reliable indicator of malware delivery. Sites identified operated across multiple languages and used professional layouts with fake user reviews to simulate legitimacy.

For parents: If a child is asking about downloading Poppy Playtime Chapter 5 on a phone or tablet, there is no legitimate version to download. Any site or video claiming otherwise is a scam, and the download likely contains malware.

This is not a new pattern. In January 2025, Mob Entertainment sued Google over fake Poppy Playtime apps — "Chapter 3" and "Chapter 4" — created by an entity called Daigo Game 2020. Those apps accumulated over 1.1 million combined downloads on Google Play, charged users between $30 and $95 for access, and delivered nothing but dead links. Google removed them in December 2024; they reappeared within days. That lawsuit remains unresolved, meaning the app store enforcement problem is still live as Chapter 5 scam sites proliferate.

The Roblox layer

The more nuanced risk — and the one most relevant to younger children — is happening on Roblox.

There is one authorised Poppy Playtime game on Roblox: Poppy Playtime: Forever, developed by Jazwares Game Studio in partnership with Mob Entertainment. Everything else is unofficial. Within days of the Chapter 5 PC launch, at least five distinct unauthorised Roblox games appeared incorporating Chapter 5 characters and branding — morph-and-roleplay games, competing "RP" experiences, games built around new characters like Giblet and Lily Lovebraids. These games use keyword-stuffed descriptions, tagging trending terms alongside Chapter 5 content to maximise visibility in search results.

The risk here is not primarily malware — Roblox's platform sandbox limits the worst technical threats. The risk is financial confusion and exploitation of the inability of young players to distinguish licensed from unlicensed content.

Many of these fan games include Robux-based monetisation through game passes and in-game purchases. Group membership prompts offering "FREE EXCLUSIVE MORPHS" are common, funnelling children toward developer communities where additional spending is encouraged. Research published at CHI 2025 found that Roblox games targeting younger audiences routinely use aggressive monetisation tactics — randomised loot mechanics, visually stimulating purchase prompts — designed to encourage impulsive Robux spending. At 500 Robux for £3.99, this accumulates quickly.

The core confusion: A child searching "Poppy Playtime Chapter 5" on Roblox will find multiple competing results — none of which are the real game, which doesn't exist on Roblox in Chapter 5 form. They may spend Robux on content with no connection to Mob Entertainment, in experiences with unvetted safety standards and minimal age gating for horror content.

Platform accountability

The monitoring operation also documented fake PC download sites appearing on itch.io, fake APK promotion pages on GitHub, and piracy distribution achieving over 32,000 downloads in the first 72 hours of launch. The pattern across all of these is the same: platforms are reactive rather than proactive, takedowns are circumvented through relisting, and enforcement consistently lags behind the highest-traffic window — which for a major game launch is the first week.

Scam operators had fake Chapter 5 download infrastructure live before most players had completed their first playthrough.

What this means in practice

For families with children who play Poppy Playtime or use Roblox, three things are worth establishing clearly:

  • There is no legitimate free download of Chapter 5 anywhere — not on a phone, not as a "repack," not from any site that isn't Steam or the Epic Games Store.
  • On Roblox, only Poppy Playtime: Forever is authorised — any other Chapter 5 game is fan-made, unvetted, and potentially monetised aggressively.
  • Robux is real money — game passes in unauthorised fan games cost real currency, and the connection to Mob Entertainment or any quality standard is zero.

The fuller monitoring report — covering the V-Bucks fraud ecosystem, threat tier classifications, scam proliferation timelines, and a forward-looking threat assessment through 2027 — is available on request.

Request the full intelligence briefing

The complete five-day monitoring report includes threat tier classifications, scam site cataloguing, piracy distribution data, and a forward-looking assessment of scam windows tied to the console release and Chapter 6 pre-release period.

Get in touch