World Cup 2026 ticket and travel scams surge as fraudsters deploy fake sites

Digital fraud targeting fans of the 2026 FIFA World Cup has risen sharply as the tournament approaches. In the last month attacks linked to the event grew almost 30%, and investigators have identified roughly 10,000 newly registered domains that mimic FIFA or World Cup branding to deceive users. The U.S. Federal Bureau of Investigation warned of dozens of fraudulent portals copying official designs, while cybersecurity firm Group‑IB reported more than 4,000 suspicious domains, many of which remain dormant until ticket demand spikes.

Scammers use WhatsApp, email, Instagram direct messages and even AI‑generated phone calls in Spanish to lure victims with unusually low‑priced tickets, flights or merchandise. Mexico, the host nation with the largest Spanish‑speaking audience, sees the highest concentration of incidents. Experts advise fans to purchase only through official FIFA channels and airline websites, avoid links in social‑media messages, enable card transaction alerts, use digital wallets, keep a backup card, and protect connections with a VPN or mobile data.

Authorities stress that any unsolicited offer—especially those that appear too good to be true—should be treated as a potential fraud, and victims should contact their banks immediately if unauthorized charges appear.