Who Pays for the Ticket Machine
Fans looking for World Cup tickets are being warned to watch out for cyber scammers as the soccer tournament is under way across North America. The event kicked off June 11 and runs until July 19, while FIFA is charging record ticket prices and some games are sold out. That mix of scarcity, hype, and price gouging creates the perfect opening for fraudsters to work the crowd while ordinary fans are left trying to navigate a marketplace built to squeeze them.
Experts and authorities say criminals are using a range of tactics to target fans desperate to attend big-name matches. The advice is to take time to consider what is being offered and to be wary of pressure tactics. If a Facebook post offers last-minute tickets to a popular game at a good price, fans are urged to pause before handing over money and ask whether the offer is too good to be true. The Britain’s Home Office warned fans last month as part of an ongoing fraud awareness campaign to watch out for phrases such as “lots of interest” or “I need to sell right now.” It said, “Scammers often use urgency to push you into making hasty decisions.”
The Platforms and the Push
Social media sites are described as a major source of scams. The U.S. Federal Trade Commission warned in a March consumer alert that fraudsters use social media posts to funnel people to scam websites, where they advertise fake tickets or sell the same seat to many people. The British government said scammers may advertise a spare ticket on social media, then move the discussion to an encrypted messaging app like WhatsApp and push the buyer to transfer money to a bank account before blocking the victim and disappearing.
Meta Platforms announced two weeks ahead of the event’s kickoff that when Facebook users search for World Cup tickets, they will see pop-up notifications reminding them to buy tickets from verified sources and telling them how to report suspicious listings. The official fix is a warning label and a reporting button, a familiar little ritual of platform management while the underlying scramble for access continues.
Experts say criminals are using artificial intelligence to create realistic messages, polished online storefronts and convincing fake endorsements and promotions. Chris Olson, CEO of digital safety company The Media Trust, said, “My advice: assume any World Cup deal that reached you through a social media ad or search result is suspect until proven otherwise.” He said the World Cup is fueling a surge of “phishing attacks and cloaking schemes.” Olson also said, “AI-powered phishing campaigns are becoming more sophisticated, more targeted, and more difficult to detect. We’ve seen it all, from data harvesting to fake ticket sales.”
Official Channels, Same Old Gatekeeping
Fans are told to go first to the official FIFA website for direct or secondhand sales. Resale tickets are also available on established third-party sites like StubHub and SeatGeek, though FIFA warns that buying outside official channels risks fake or invalid tickets, or inflated prices. The whole setup still runs through approved channels, verified sources, and gatekeepers deciding who gets access and at what price.
Another danger is copycat FIFA sites. The FBI warned in a public service announcement that scammers are creating spoof FIFA websites to trick people into providing personal details or sell fake tickets or hospitality packages. The bureau listed three dozen spoof FIFA websites it’s aware of with URLs that appear at first glance to be authentic, such as fifa-online.com and fifa-ticket.live. Most have stopped working and some have been flagged as malware, but the FBI warned new ones would continue to appear. The FBI said fans should type fifa.com directly into their browser’s address bar instead of using a search engine and avoid clicking on sponsored search results, which it said could be “paid imitators” trying to divert online traffic.
When the Stream Becomes the Trap
The article also warns about dodgy sites for streaming World Cup games. Many fans will not be able to attend in person and will try to watch on TV, but not all matches will be available on free broadcasts. Cybercriminals typically set up copycopy sites and promote them on Telegram, Facebook, Discord, Reddit and other online forums, according to a report by Assaf Morag, a researcher at cybersecurity company Flare. Based on experience from previous major sporting events, illegal streams will pop up right before a game kickoff.
Crooks then deploy methods including showing viewers scam ads and fake software updates, harvesting their data, or earning commissions by sending them to gambling or adult content sites. Morag said, “Nearly 40% of users who access illegal streams experience direct financial losses due to scams, fraud, or compromised payment information.” He added, “The trap is incredibly easy to fall into. You click a ‘Play’ button, and the site immediately forces your browser through multiple hidden layers of tracking, pop-ups, and advertising infrastructure explicitly designed to hide malicious software — all while the match never actually loads.”
The article says to write to [email protected] with suggestions for future editions of One Tech Tip.