TLDR
As the FIFA World Cup 2026 approaches, ESET researchers have spotted a wave of imposter websites mimicking the official FIFA portal to harvest credit card numbers, personal details and ticket payments from eager soccer fans. The bogus...
How it works
As the FIFA World Cup 2026 approaches, ESET researchers have spotted a wave of imposter websites mimicking the official FIFA portal to harvest credit card numbers, personal details and ticket payments from eager soccer fans. The bogus...
Red flags
- Domain is not on fifa.com — look alike URLs with added words or hyphens are a classic sign. You are pushed to register or pay faster than expected, with pressure about tickets "selling out". Payment page lacks HTTPS, shows no clear merchant name, or asks for unusual extra personal data
What to do
- 1Only buy tickets and merchandise via the official fifa.com website — bookmark it, do not follow links from ads or emails. Pay with a credit card (not bank transfer) so you can dispute fraudulent charges. Report suspicious sites to your national CERT or to FIFA, and warn friends
Source
welivesecurity
Source reviewed by Mythos Forensic Team
https://www.welivesecurity.com/en/cybersecurity/foul-play-fake-fifa-world-cup-websites-tickets/FAQ
Is Fake FIFA World Cup 2026 websites steal tickets, money and personal data a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Domain is not on fifa.com — look alike URLs with added words or hyphens are a classic sign. You are pushed to register or pay faster than expected, with pressure about tickets "selling out". Payment page lacks HTTPS, shows no clear merchant name, or asks for unusual extra personal data
What should I do first?
Only buy tickets and merchandise via the official fifa.com website — bookmark it, do not follow links from ads or emails. Pay with a credit card (not bank transfer) so you can dispute fraudulent charges. Report suspicious sites to your national CERT or to FIFA, and warn friends
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.