Fake FIFA websites sell counterfeit World Cup 2026 tickets and steal your data
Criminals clone the official FIFA website under lookalike URLs to sell fake 2026 World Cup tickets and fraudulent visa documents. The FBI found 36+ fake domains; one gang operates 300+ sites harvesting passport numbers and payment data.
Also known as: fake FIFA ticket website, World Cup 2026 ticket scam, FIFA typosquatting scam, GHOST STADIUM phishing
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
- ! If you installed any "support", "server", "refund", or remote-access app at their request (AnyDesk, TeamViewer, Quick Support, etc.): disconnect the internet now, then run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
What to do right now
- 1 Only buy tickets directly from fifa.com — type the URL yourself; never follow any link from a search engine result, social media ad, or messaging app
- 2 If you submitted payment or card data on a suspicious site, call your bank or card issuer immediately to dispute the charge and freeze or replace your card
- 3 If you entered your passport number on a fake visa site, place a fraud alert on your credit reports at annualcreditreport.com and file an identity theft report at identitytheft.gov
- 4 If you used the same password on the suspicious site as on your real FIFA.com account, change your FIFA password immediately and enable two-factor authentication
- 5 Screenshot and save all evidence (URL, messages, payment confirmations) before reporting
- 6 If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
- 7 Report to the FTC at https://reportfraud.ftc.gov and the FBI's IC3 at https://www.ic3.gov.
Was remote-access software installed?
If a scammer asked you to install AnyDesk, TeamViewer, Quick Support, or any remote-access app, your device may still be compromised.
Run SeraphSecure to detect and remove it →Red flags
- ⚠ Only buy tickets from fifa.com — type it directly into your browser; sponsored search results and social media links often lead to convincing clones
- ⚠ No special tournament visa exists for the 2026 World Cup — any site charging a fee for a 'Visa to the World Cup' or 'FIFA Pass entry document' is fraudulent; visitors need only a standard B1/B2 visa or ESTA
- ⚠ Scammers move conversations to WhatsApp or Telegram, then demand irreversible payment by Zelle, Apple Pay, cryptocurrency, or gift cards — FIFA never processes ticket sales this way
- ⚠ Bundled 'ticket + hotel + visa' packages offered with countdown timers or 'only 3 spots left' urgency on social media are almost always fraudulent
- ⚠ One sophisticated ring (GHOST STADIUM) runs 300+ pixel-perfect FIFA clones using a spoofed login page that steals your FIFA.com account credentials
Known variants
-
Spanish-language social media ads target Latino fans with fake streaming apps promising World Cup 2026 access for a monthly subscription. These sites harvest banking credentials and may install malware.
Last seen: 6/12/2026
-
World Cup streaming piracy sites and fake betting portals deliver banking trojans and remote-access malware disguised as match-viewing apps. Fake betting sites also collect passport scans and selfies under an 'age verification' pretext for later identity theft.
Last seen: 6/12/2026
Sources
- FBI IC3 — PSA260527: Threat Actors Spoofing FIFA Websites in Advance of the 2026 World Cup (May 2026)
- Group-IB — The GHOST STADIUM Score: Billions At Stake at the World's Largest Football Tournament (May 2026)
- FTC — How to make your World Cup experience scam free (Mar 2026)
- Malwarebytes — The 2026 World Cup scam economy is already running before the first whistle (May 2026)
- FindLaw — 2026 World Cup Ticket Scams: How to Avoid Them and What to Do If You Have Already Paid (May 2026)
- Cybernews — GHOST STADIUM: Complex phishing operation targeting FIFA World Cup (May 2026)
- Infobae — Cybercriminals selling fake tickets, merchandise and travel packages as World Cup 2026 approaches (May 2026)
- Infobae — World Cup 2026 ticket scams: FBI recommendations as tournament opens June 11 (Jun 2026)
- The Hacker News — FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins (Jun 2026)
- Rescana — FIFA World Cup 2026 targeted by fake ticket sites, banking malware and credential theft (Jun 2026)
- El Tiempo — US authorities warn of widespread fraud and fake ticket sales as World Cup 2026 opens (Jun 2026)
- Calgary Journal — Fact File: Bogus FIFA websites feed World Cup ticket scams (Jun 9 2026)
- Moneywise — FBI warns cybercriminals are spoofing FIFA's ticketing site (Jun 2026)
- Cyble — FIFA World Cup 2026 Scams Surge As Fake Sites Target Fans (Jun 2026)
- Norton — 2026 World Cup ticket scams and how to spot them (Jun 2026)
- AARP — Looking for World Cup Tickets? Watch Out for Scams (Jun 2026)