Fake FIFA World Cup ticket sites are draining fans’ bank accounts, the FBI warns.

The 2026 FIFA World Cup has already become one of the biggest ticket-demand events in sports history, with matches spread across cities in the United States, Mexico, and Canada and millions of fans competing for a limited pool of official seats. That gap between demand and supply is exactly the condition scammers look for, and federal investigators say criminals have moved quickly to build an entire ecosystem of fraudulent websites designed to look like FIFA’s own ticketing platform.

The warning comes as fans in host cities and abroad scramble to secure last-minute seats, gift packages, and hospitality bundles, often under time pressure that makes it easier to skip the kind of careful verification a purchase like this would normally get.

The Scale of the Spoofing Campaign

The FBI’s Internet Crime Complaint Center issued a public service announcement warning that threat actors are conducting spoofing attacks against FIFA’s official website ahead of the 2026 World Cup, which kicked off in June with matches beginning in Mexico City. According to reporting on the advisory, investigators have identified at least 36 fraudulent domains built to imitate FIFA’s legitimate site, and officials expect that number to keep climbing as the tournament progresses through its group and knockout stages.

The fake sites collect names, home addresses, phone numbers, email addresses, and banking information from fans who believe they are completing a legitimate ticket or hospitality purchase. In many cases the sites are convincing enough to pass a casual glance, featuring polished layouts, realistic customer-service messaging, and checkout flows that mimic the real FIFA ticketing experience closely enough that fans do not realize anything is wrong until a charge appears on a statement or a ticket never arrives.

How Scammers Are Getting People to Click

Investigators point to typosquatting as the primary tactic driving traffic to the fake domains, a technique in which scammers register web addresses that differ from the real one by a single character or a subtle visual swap, such as replacing “www” with “wvvw.” Fans typing quickly or tapping a link from a text message or social media post are unlikely to notice the substitution before landing on a page built to look identical to fifa.com.

Artificial intelligence tools have made the fake pages considerably harder to spot than the crude scam sites of past tournaments. Rather than the broken grammar and mismatched logos that once served as warning signs, current versions feature AI-generated copy, professional-looking seller messages, and realistic order confirmations that closely mirror what a real ticketing platform would send. Scammers are also running parallel schemes on social media, posting fake ticket listings and hospitality packages that direct buyers off-platform and away from any purchase protection a legitimate marketplace might offer.

What Federal Investigators Recommend

The advisory urges fans to type fifa.com directly into a browser’s address bar rather than clicking links from search results, emails, or social posts, and to double-check that the URL reads exactly as “www.fifa.com” before entering any payment information. Investigators specifically flagged sponsored search results as a risk, noting that paid advertising placements have been used to push fraudulent sites above the legitimate one in search rankings, a tactic that exploits the assumption many shoppers make that a top search result is automatically trustworthy.

Additional guidance from the bureau includes paying by credit card rather than wire transfer, cryptocurrency, or gift card whenever possible, since those payment methods offer far less recourse once money has changed hands, and verifying any third-party ticket reseller against FIFA’s list of officially licensed partners before completing a purchase. Fans who believe they have already been targeted are encouraged to file a report with the Internet Crime Complaint Center and to contact their bank or card issuer immediately to dispute any unauthorized charges.

What a Fake Ticket Purchase Actually Costs Fans

Beyond the immediate financial loss, victims of these schemes often face a second layer of harm once they arrive at a stadium gate holding a ticket that was never valid to begin with, or discover a hospitality package they paid for simply does not exist. Because many of the fraudulent transactions involve upfront payment through methods that are difficult to reverse, fans who realize they have been scammed after a purchase frequently have little recourse beyond disputing the charge with their card issuer, a process that can take weeks and does not guarantee a refund once a merchant account tied to the scam has already been shut down or emptied.

The personal information collected through these fake checkout flows, including home addresses, phone numbers, and banking details, also creates downstream risk well beyond the initial ticket purchase. Fraud investigators note that data harvested through one scam campaign is frequently resold or reused to target the same victims again with follow-up phishing attempts, sometimes framed as a “refund” for the fraudulent ticket purchase itself, a tactic designed to catch victims who are already anxious about the money they have lost and eager for a quick resolution.

A Pattern That Repeats With Every Major Event

Coverage of the advisory, including reporting from BleepingComputer, notes that the FIFA ticket scam wave fits a well-established pattern in which large sporting and entertainment events become magnets for fraud precisely because of the mix of high demand, genuine scarcity, and emotional urgency among fans who do not want to miss out. Similar spoofing campaigns have targeted Olympic ticketing, major concert tours, and other high-profile events in past years, and investigators expect the same playbook to resurface around future tournaments unless awareness campaigns keep pace with the increasingly polished fake sites scammers are able to produce.

With the tournament continuing through the summer, officials are treating the fake-ticket problem as an ongoing threat rather than a one-time alert, and they are encouraging fans, family members helping older relatives navigate ticket purchases, and workplaces organizing group outings to treat any World Cup ticket offer arriving through an unsolicited link or social media message with the same skepticism reserved for any unexpected financial request.

Morning Overview produced this article with AI assistance and reviewed it against the cited sources.

More from Morning Overview