FBI warns of fake FIFA websites running World Cup fraud schemes
The FBI says scammers are using fake FIFA sites to steal data, sell bogus tickets, and push World Cup-themed frauds.
Intelligence analysis by GPT-5.4 Mini
The FBI is warning that hundreds of lookalike FIFA websites are being used to scam fans before the 2026 World Cup. The fraud pages collect personal and payment details, while researchers say related campaigns are already spreading through search ads and messaging apps.
The FBI says bad people are making fake FIFA websites to trick fans. These sites can look almost real, like a copy of the real thing with a tiny spelling change.
The trick is a bit like someone wearing a costume that looks almost right from far away. If people click, the fake site may try to steal money, passwords, or private details.
To stay safe, people should type the real website by hand, ignore strange ads and messages, and check the web address carefully before entering any information.
Analysis
What the FBI is warning about
The FBI says criminals are setting up fake websites that impersonate FIFA ahead of the 2026 World Cup, which runs from June 11 to July 19 in the United States, Canada, and Mexico. The goal is to steal personal and financial information, sell fake tickets and hospitality packages, and support other event-related scams.
How the schemes work
According to the warning, many of the sites rely on tiny spelling changes that make them easy to miss at a glance, such as domains that look similar to fifa.com. The fake sites also use other top-level domains like .org, .xyz, .live, and .sale, and some pretend to be job portals with names that suggest hiring or recruitment.
The FBI says these pages may collect names, home and email addresses, phone numbers, and payment details. That information can then be used for identity theft, fake account creation, or financial fraud.
What researchers are seeing
The article cites Group-IB and Bitdefender findings that show the wider campaign is not limited to one channel. Their researchers have seen World Cup-themed malvertising and scam promotion through Google Search, Facebook ads, Telegram, and WhatsApp. Group-IB says one operation it tracks as Ghost Stadium uses more than 300 phishing sites that copy the real FIFA portal to push premium ticket fraud.
Bitdefender says it has also seen fake merchandise, kits, collectibles, streaming offers, and Panini sticker scams aimed at users in multiple countries, including the US, Canada, Mexico, the UK, Germany, and Australia.
What users should do
The FBI recommends typing fifa.com manually, avoiding sponsored search ads, checking that the URL ends in .com, relying on bookmarks for official sites, ignoring suspicious direct messages, and never entering sensitive data unless the site is verified. Victims are also urged to report incidents to the FBI’s Internet Crime Complaint Center with details about the fake domain, interaction history, and payment information.
Key points
- The FBI says scammers are using fake FIFA websites ahead of the 2026 World Cup.
- The fake sites aim to steal personal data, payment details, and money through fraud.
- Researchers say World Cup scams are spreading through search ads, Facebook, Telegram, and WhatsApp.
- One campaign reportedly uses more than 300 phishing sites that copy FIFA pages.
- The FBI advises fans to type the official address directly and avoid suspicious links.
