Scammers are targeting desperate fans seeking tickets for the 2026 FIFA World Cup with increasingly sophisticated schemes, including fake FIFA websites, social media advertisements for fraudulent tickets, and AI-generated job offers, according to the FBI and cybersecurity experts. The tournament, spanning the United States, Canada, and Mexico through July 19, 2026, has created a fertile ground for fraudsters due to high demand and last-minute ticket hunting.
These scams exploit the emotional nature of attending a once-in-a-lifetime event. Fraudsters create polished, official-looking websites that mimic FIFA's branding and ticketing pages. Some fake domains are designed to be nearly indistinguishable from the real site, especially when viewed on a mobile device. The FBI warns that these fake sites aim to collect sensitive personal information, including names, addresses, phone numbers, email addresses, and banking details, which can then be used for identity theft or future, more convincing scams.
Evolving Tactics and Warning Signs
The FBI has identified numerous spoofed FIFA domains designed to trick fans, often through minor alterations in spelling or the use of unusual web extensions. Examples include domains like www.fifa[.]pink, fifa[.]beer, and fifa-online[.]com. These tactics, known as typo squatting, rely on users making small typing errors or clicking links too quickly. AI is further enabling scammers to create highly realistic fake ticket listings, emails, and seller messages, complete with professional copy and smooth checkout processes.
AI can also generate fake confirmation emails, ticket screenshots, and QR codes, making fraudulent tickets appear legitimate. Experts advise that a QR code or a ticket screenshot alone is insufficient proof of authenticity. The genuine method for ticket transfer is through FIFA's official ticketing system or its authorized resale marketplace. If a seller refuses to use the official transfer platform, it is a significant red flag.
Risks on Resale Markets and Social Media
Even legitimate resale platforms have seen issues, with some fans receiving refunds instead of valid tickets after purchase. Instances have been reported where tickets bought through platforms like StubHub did not transfer into the official FIFA ticketing app, leaving ticket holders with the funds but without the intended experience. Social media platforms such as Facebook Marketplace, X, Reddit, Telegram, and WhatsApp are also hotbeds for these scams. Sellers may use fabricated stories and friendly communication to gain trust before pushing for irreversible payment methods like Zelle, Venmo, Cash App, wire transfers, gift cards, or cryptocurrency.
Protecting Against Scams
Fans are urged to exercise extreme caution. The safest approach is to navigate directly to FIFA.com by typing it into the browser and then accessing the ticketing page from there. It is advisable to bookmark the official FIFA site for future reference. When encountering ticket ads or links, especially on social media or search engines, users should meticulously check the website address (URL) for any discrepancies. Genuine tickets should be transferred through the official ticketing system. When making payments, using a credit card is recommended as it typically offers stronger fraud protection compared to peer-to-peer payment apps or wire transfers.
Before completing a purchase, fans should verify the ticket transfer method and question prices that seem too good to be true. Scammers often use high-pressure tactics, such as phrases like "last chance" or "someone else wants them," to rush potential victims into making impulsive decisions. Slowing down and verifying the legitimacy of the offer and the seller is crucial.
If Scammed
Victims of World Cup ticket scams should act quickly. This includes contacting their bank or credit card company to dispute charges or block payments, changing passwords for any affected accounts, and enabling two-factor authentication. Evidence such as screenshots, emails, and payment receipts should be saved, and devices should be scanned for malware. Reporting the scam to the FBI's Internet Crime Complaint Center (IC3.gov) is also recommended. If sensitive personal information was compromised, freezing credit can help prevent fraudulent account openings.
Experts emphasize that the proliferation of believable fake websites, amplified by AI, makes vigilance paramount. Relying on official channels and scrutinizing all offers, especially those creating a sense of urgency, are the best defenses against these evolving cyber threats.