World Cup Ticket Scams Rise as Event Progresses
Cybercriminals are employing sophisticated tactics, including AI-generated content, to defraud soccer fans seeking tickets and access to matches.
As the World Cup tournament continues, fans eager to secure tickets or watch games are increasingly targeted by sophisticated online scams. Authorities and cybersecurity experts are warning consumers to be vigilant against a range of fraudulent activities designed to exploit demand for the popular event, which runs until July 19.
Cybercriminals are leveraging tactics such as creating fake ticket listings on social media, spoofing official websites, and promoting illegal streaming services. These scams often capitalize on a sense of urgency, using phrases like "lots of interest" or "I need to sell right now" to pressure potential victims into making hasty decisions, according to Britain's Home Office.
Social media platforms are a significant vector for these scams. Fraudsters may use posts to direct users to malicious websites where they advertise non-existent tickets or sell the same seat multiple times. In some cases, discussions move to encrypted messaging apps, where scammers request payment before disappearing and blocking the victim. Meta Platforms has begun displaying pop-up notifications for Facebook users searching for World Cup tickets, reminding them to buy from verified sources and to report suspicious listings.
Experts note that criminals are increasingly using artificial intelligence to create realistic scam messages, polished online storefronts, and convincing fake endorsements. Chris Olson, CEO of digital safety company The Media Trust, advises treating any World Cup deal from social media ads or search results as suspect until proven otherwise. He has observed a surge in "phishing attacks and cloaking schemes" fueled by the event, with AI-powered campaigns becoming more difficult to detect.
To avoid these pitfalls, fans are advised to purchase tickets directly from the official FIFA website or through reputable third-party resale sites like StubHub and SeatGeek. FIFA cautions that buying outside official channels carries the risk of acquiring fake or invalid tickets, or paying inflated prices. The FBI has also warned about copycat FIFA websites designed to trick users into divulging personal information or purchasing fake tickets and hospitality packages. The bureau has identified numerous spoof websites with URLs mimicking the official site, and warns that new ones continue to emerge.
The FBI recommends typing "fifa.com" directly into a browser's address bar to avoid search engine redirects, and advises caution with sponsored search results, which could be "paid imitators."
Beyond ticket sales, scammers are also targeting fans seeking to watch matches online. Dodgy streaming sites are promoted on platforms like Telegram, Facebook, Discord, and Reddit. These sites often display scam advertisements and fake software updates, harvest user data, or redirect viewers to gambling or adult content sites. A report by Assaf Morag, a researcher at cybersecurity company Flare, indicates that nearly 40% of users who access illegal streams experience direct financial losses. These sites are designed to ensnare users through deceptive "Play" buttons that trigger hidden layers of tracking, pop-ups, and malicious software, with the actual match never loading.