World Cup 2026 sees surge in phishing and fake job scams

Cybersecurity firms have reported a sharp rise in fraud linked to the FIFA World Cup 2026 digital infrastructure. Group‑IB identified more than 4,300 fraudulent domains imitating official FIFA sites since August 2025, while FortiGuard Labs recorded over 13,000 World Cup‑related domains between January and May 2026, about 8.8% of which were classified as malicious or suspicious. Experts warn that the massive simultaneous use of ticketing platforms, telecom networks, payment services and mobile apps creates a “stress test” for organisations, increasing the risk of service disruptions and credential theft.

At the same time, cybercriminals have launched sophisticated fake‑employment schemes that pose as FIFA recruitment offers. The campaigns use copied logos, genuine‑looking recruiter profiles and deceptive interview invitations to lure victims into submitting personal and financial data. Security advisories urge users to verify job listings on official channels and to be wary of unsolicited messages promising unusually high salaries.

Both trends highlight the need for stronger early‑detection, vulnerability management and incident‑response capabilities across telecom, financial, transport and public‑sector operators supporting the tournament.