FBI Issues Warning as Scammers Target World Cup Fans

With the 2026 FIFA World Cup drawing closer, excitement is building among football fans worldwide. However, cybercriminals are also gearing up, creating a surge in fake websites designed to trick unsuspecting users. The FBI's Internet Crime Complaint Center has issued a public service announcement detailing the threat and providing a list of known scam domains.

According to the FBI release, threat actors create deceptive versions of legitimate websites, such as www.fifa.com, with the goal of tricking users into believing they are interacting with an official brand. These fake sites collect personal information, sell fake World Cup tickets and hospitality products, and may facilitate other malicious activities. If a threat actor gains access to a victim's personally identifiable information (PII), they can create new accounts in the victim's name and ultimately defraud them.

List of Known Scam Websites

The FBI has identified numerous fraudulent domains that mimic official FIFA properties. Here is the list of scam websites identified so far:

  • www.fifa[.]cab
  • www.fifa[.]pink
  • www.fifa[.]blue
  • www.fifa[.]pub
  • FIFA[.]city
  • Fifa[.]bio
  • fifa[.]beer
  • fifa[.]click
  • fifa[.]cam
  • fifa[.]ceo
  • fifa[.]help
  • filfa[.]org
  • fifa-online[.]com
  • https://fifa-2026[.]xyz
  • jobs-fifa[.]com
  • fifa-hr[.]com
  • fifa-careerhub[.]com
  • fifaworldcup-careers[.]com
  • fifa-hiring[.]com
  • fifahiring[.]com
  • fifa-ticket[.]live
  • fifastore.us[.]com
  • fifaworldcup26[.]sale
  • fifaworldcup26.xcover-staging[.]com
  • worldcup2026-tickets.com[.]mx
  • worldcup26ticket[.]com
  • 2026fifaworldcuptickets[.]online
  • fwc2026[.]net
  • fwc2026.web[.]app
  • www.fifa2026p[.]com
  • fifa2026fworldcup[.]com
  • wvvw-fifa[.]com
  • ww-fifa[.]com
  • fifa-com[.]com
  • www.fifa-com[.]services
  • quiniela-fifa-2026.pages[.]dev

How Scammers Operate

These fake websites often look nearly identical to the official FIFA site, using similar logos, color schemes, and layouts. They rely on typosquatting—registering domain names that are slight misspellings of legitimate URLs—to catch users who type quickly or are not paying close attention. For example, replacing an 'i' with an 'l' (filfa.org) or adding extra hyphens (fifa-com.com) are common tactics.

Once a user lands on a fake site, they may be prompted to enter personal details such as name, address, credit card information, or passport numbers under the guise of purchasing tickets or hospitality packages. The FBI warns that this data can then be used for identity theft, unauthorized transactions, or sold on the dark web.

How to Safely Buy World Cup Tickets

The only safe way to purchase World Cup tickets is through FIFA's official website: www.fifa.com. Fans should be vigilant and double-check the URL before entering any information. Look for the official domain and ensure there are no typos or extra characters. Avoid clicking on links from unsolicited emails, social media ads, or search results that may lead to fraudulent sites.

Additionally, fans should be wary of any website offering tickets at prices that seem too good to be true, or that require payment via unconventional methods such as wire transfers or cryptocurrency. Official ticket sales are conducted through FIFA's authorized channels, and any deviation from that should raise red flags.

Protecting Yourself from Scams

To avoid falling victim to these scams, the FBI recommends the following precautions:

  • Always verify the website URL before entering any personal or financial information.
  • Use official sources only—bookmark the legitimate FIFA website for easy access.
  • Be cautious of unsolicited offers or advertisements for tickets, especially on social media.
  • Check for HTTPS and a padlock icon in the address bar, though scammers can also obtain SSL certificates, so this is not foolproof.
  • Monitor your bank and credit card statements for any unauthorized charges.
  • Report any suspected scam websites to the FBI's Internet Crime Complaint Center (IC3).

Conclusion

As the 2026 World Cup approaches, the threat from fake websites is real and growing. By staying informed and following official channels, fans can enjoy the tournament without falling prey to cybercriminals. Remember: if an offer looks too good to be true, it probably is. Stick to FIFA.com for all ticket purchases and official information.

This article is based on reporting by Mashable. Read the original article.

Originally published on mashable.com