Threat IntelligenceJun 19, 2026

FIFA World Cup 2026: Hackers Target Football Fans With Fake Tickets Sites

Hackers are targeting FIFA World Cup 2026 fans with fake ticket and hotel sites, and betting scams.

Cybercriminals are exploiting the FIFA World Cup 2026 popularity with multiple scam networks targeting fans. These operations use fake hotel bookings, cloned websites, and live chat features to steal funds and personal details. Some scams even intercept one-time passwords to hijack bank accounts.

AI summary of the linked source. Not reviewed by an editor. How this works

Read at source

The lesson from this incident

Full lesson

Cybercriminals are capitalizing on the excitement surrounding FIFA World Cup 2026 by deploying convincing fake ticketing and hotel booking websites designed to steal money and personal data from unsuspecting fans. These scams leverage cloned legitimate sites, live chat features to build false trust, and OTP interception techniques to fully compromise victims' bank accounts. The root cause is a lack of public security awareness — fans are not equipped to distinguish fraudulent sites from official ones under high-demand, emotionally charged purchasing conditions. This matters because victims face both immediate financial loss and long-term identity theft risks from harvested personal details. Major sporting events consistently serve as high-value lures for phishing campaigns, making proactive user education critical.

What helps against this

How we list vendors

Forcepoint research

DNS filtering and secure web gateway
Users cannot reach known-malicious sites, and malware cannot phone home.
For examplePalo Alto Networks Prisma Access Cloudflare Gateway DNSFilter all options
Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
For exampleCheck Point Harmony Email & Collaboration Mimecast Email Security Proofpoint Core Email Protection all options
Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
For exampleSoSafe Awareness Platform Huntress Managed Security Awareness Training KnowBe4 Security Awareness Training all options

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

domain — cn-web-fifacwc.com
domain — zone-2026fifa.com
domain — fifaworldcup2026cityhotels.com
domain — fifa.monster
domain — tbpay.uk
domain — worldcup2026ticket.shop
domain — ww-fifa.com

Entities

FIFA World Cup 2026 Scams (campaign)Phishing (technology)Live Chat (technology)Gambling Platforms (technology)Hotel Bookings (technology)One-Time Password (OTP) Interception (technology)