TLDR
The FBI is warning consumers about fake websites impersonating FIFA ahead of the 2026 World Cup (June 11–July 19, held in the US, Canada, and Mexico). Threat actors use typosquatting (fiffa.com, .org, .xyz domains) to steal personal and...
How it works
The FBI is warning consumers about fake websites impersonating FIFA ahead of the 2026 World Cup (June 11–July 19, held in the US, Canada, and Mexico). Threat actors use typosquatting (fiffa.com, .org, .xyz domains) to steal personal and...
Red flags
- : Misspelled domains (fiffa, jobs fifa, fifa hiring) or unusual TLDs (.xyz, .live, .sale) Sponsored search results or unsolicited ads offering discounted tickets or merchandise Requests for payment or personal data via direct messages on WhatsApp, Telegram, or Facebook
What to do
- 1: Manually type fifa.com in your browser or use saved bookmarks instead of clicking search results Verify the URL ends in .com before entering any data
- 2avoid alternate top level domains Report suspicious sites to the FBI's Internet Crime Complaint Center (IC3) at ic3.gov with domain details and interaction history
Source
bleepingcomputer
Source reviewed by Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/fbi-warns-of-fake-fifa-websites-running-world-cup-fraud-schemes/FAQ
Is FBI Warns: Fake FIFA Websites Steal Data and Sell Counterfeit World Cup Tickets a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
: Misspelled domains (fiffa, jobs fifa, fifa hiring) or unusual TLDs (.xyz, .live, .sale) Sponsored search results or unsolicited ads offering discounted tickets or merchandise Requests for payment or personal data via direct messages on WhatsApp, Telegram, or Facebook
What should I do first?
: Manually type fifa.com in your browser or use saved bookmarks instead of clicking search results Verify the URL ends in .com before entering any data; avoid alternate top level domains Report suspicious sites to the FBI's Internet Crime Complaint Center (IC3) at ic3.gov with domain details and interaction history
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.