Threats · 94 days ago
World Cup Fraud Is Already Parked and Ready The risk is not just fake ticket ads. The bigger problem is a built-out fraud market that can steal FIFA logins, resell tickets, and drain payments as soon as demand spikes around kickoff.
Researchers and the FBI say World Cup 2026 scams are already live, with more than 4,300 fraudulent FIFA domains tracked by Group-IB and more than 13,000 World Cup-themed domains found by FortiGuard Labs. One cluster uses a near-perfect copy of FIFA's login flow and password reset path, while other campaigns push banking malware through pirate streaming apps and use cloned payment options, including crypto.
The setup matters because the infrastructure is already in place. That lets fraud scale fast during the tournament window, when tickets are scarce and fans are easiest to pressure into trusting a lookalike site.
Timeline Sources 4 sources covering this story
Infosecurity Magazine Jun 12
Over 80% of Sports Organizations Targeted by Hackers in the Last Year
As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals
Cybersecurity Dive Jun 11
FIFA World Cup expected to face extensive criminal, hacktivist cyber threats
Researchers warn that thousands of malicious domains are already in place, as fans and tournament organizers face potential attacks.
Help Net Security Jun 8
Cybercriminals create 19,000 FIFA-themed domains ahead of 2026 World Cup - Help Net Security
Phishing campaigns, ticket scams, travel fraud and DDoS threats are among the cyber threats linked to the 2026 FIFA World Cup.
The Hacker News Jun 5
FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins
Researchers and the FBI warn that fake FIFA domains, banking malware in streaming apps, and stolen logins are already hitting World Cup 2026 fans.
Part of the PlainSec briefing for 2026-06-08
Editions Related stories Threats · 94 days ago
World Cup Fraud Is Already Parked and Ready The risk is not just fake ticket ads. The bigger problem is a built-out fraud market that can steal FIFA logins, resell tickets, and drain payments as soon as demand spikes around kickoff.
Researchers and the FBI say World Cup 2026 scams are already live, with more than 4,300 fraudulent FIFA domains tracked by Group-IB and more than 13,000 World Cup-themed domains found by FortiGuard Labs. One cluster uses a near-perfect copy of FIFA's login flow and password reset path, while other campaigns push banking malware through pirate streaming apps and use cloned payment options, including crypto.
The setup matters because the infrastructure is already in place. That lets fraud scale fast during the tournament window, when tickets are scarce and fans are easiest to pressure into trusting a lookalike site.
Timeline Sources 4 sources covering this story
Infosecurity Magazine Jun 12
Over 80% of Sports Organizations Targeted by Hackers in the Last Year
As the FIFA World Cup 2026 kicks off, a new Darktrace report warns that sports teams and bodies are a major target for cyber criminals
Cybersecurity Dive Jun 11
FIFA World Cup expected to face extensive criminal, hacktivist cyber threats
Researchers warn that thousands of malicious domains are already in place, as fans and tournament organizers face potential attacks.
Help Net Security Jun 8
Cybercriminals create 19,000 FIFA-themed domains ahead of 2026 World Cup - Help Net Security
Phishing campaigns, ticket scams, travel fraud and DDoS threats are among the cyber threats linked to the 2026 FIFA World Cup.
The Hacker News Jun 5
FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins
Researchers and the FBI warn that fake FIFA domains, banking malware in streaming apps, and stolen logins are already hitting World Cup 2026 fans.
Part of the PlainSec briefing for 2026-06-08
Editions Related stories