Threats & Adversaries
World Cup fraud is already parked and ready The risk is not just fake ticket ads. The bigger problem is a built-out fraud market that can steal FIFA logins, resell tickets, and drain payments as soon as demand spikes around kickoff.
Researchers and the FBI say World Cup 2026 scams are already live, with more than 4,300 fraudulent FIFA domains tracked by Group-IB and more than 13,000 World Cup-themed domains found by FortiGuard Labs. One cluster uses a near-perfect copy of FIFA's login flow and password reset path, while other campaigns push banking malware through pirate streaming apps and use cloned payment options, including crypto.
The setup matters because the infrastructure is already in place. That lets fraud scale fast during the tournament window, when tickets are scarce and fans are easiest to pressure into trusting a lookalike site.
4 sources · Jun 12
Timeline Sources Jun 12 Infosecurity Magazine
Over 80% of Sports Organizations Targeted by Hackers in the Last Year
As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals
original Jun 11 Cybersecurity Dive
FIFA World Cup expected to face extensive criminal, hacktivist cyber threats
Researchers warn that thousands of malicious domains are already in place, as fans and tournament organizers face potential attacks.
original Jun 8 Help Net Security
Cybercriminals create 19,000 FIFA-themed domains ahead of 2026 World Cup - Help Net Security
Phishing campaigns, ticket scams, travel fraud and DDoS threats are among the cyber threats linked to the 2026 FIFA World Cup.
original Part of the PlainSec briefing for 2026-06-08
Every edition of this story: World Cup fraud is already parked and ready
More from today Threats & Adversaries
World Cup fraud is already parked and ready The risk is not just fake ticket ads. The bigger problem is a built-out fraud market that can steal FIFA logins, resell tickets, and drain payments as soon as demand spikes around kickoff.
Researchers and the FBI say World Cup 2026 scams are already live, with more than 4,300 fraudulent FIFA domains tracked by Group-IB and more than 13,000 World Cup-themed domains found by FortiGuard Labs. One cluster uses a near-perfect copy of FIFA's login flow and password reset path, while other campaigns push banking malware through pirate streaming apps and use cloned payment options, including crypto.
The setup matters because the infrastructure is already in place. That lets fraud scale fast during the tournament window, when tickets are scarce and fans are easiest to pressure into trusting a lookalike site.
4 sources · Jun 12
Timeline Sources Jun 12 Infosecurity Magazine
Over 80% of Sports Organizations Targeted by Hackers in the Last Year
As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals
original Jun 11 Cybersecurity Dive
FIFA World Cup expected to face extensive criminal, hacktivist cyber threats
Researchers warn that thousands of malicious domains are already in place, as fans and tournament organizers face potential attacks.
original Jun 8 Help Net Security
Cybercriminals create 19,000 FIFA-themed domains ahead of 2026 World Cup - Help Net Security
Phishing campaigns, ticket scams, travel fraud and DDoS threats are among the cyber threats linked to the 2026 FIFA World Cup.
original Part of the PlainSec briefing for 2026-06-08
Every edition of this story: World Cup fraud is already parked and ready
More from today