FBI warns of widespread fraud campaign targeting FIFA World Cup 2026 fans

With the 2026 FIFA World Cup now underway, the FBI and independent security researchers are warning that fraudsters have built an extensive network of scams designed to exploit the global surge in fan interest. Investigators say they have identified thousands of lookalike domains mimicking official FIFA ticketing, merchandise and streaming sites, many designed to harvest payment details or login credentials from fans searching for tickets, travel deals or ways to watch matches online. Separately, researchers report finding banking malware bundled inside unofficial, pirated streaming apps that promise free access to live matches, as well as coordinated phishing operations that closely copy FIFA's official login pages in an effort to take over real fan accounts — which can then be resold or used for further fraud. Security experts say major global sporting events have become a predictable seasonal target for cybercriminals precisely because they generate a short-lived but enormous spike in searches, downloads and purchases from people who may be less cautious than usual. Their advice to fans largely echoes standard guidance: buy tickets and merchandise only through official, verified channels, avoid unofficial streaming apps entirely, and treat any unexpected login prompt — even one that looks exactly like a familiar site — with suspicion.