FBI Warns of Spoofed FIFA Websites and Expanding Cyber Fraud Campaign Ahead of 2026 World Cup

The Federal Bureau of Investigation has issued a public warning alerting the public to an expanding cyber fraud campaign involving spoofed FIFA websites, fake World Cup ticket platforms, fraudulent job portals, and impersonation domains tied to the upcoming 2026 FIFA World Cup.

According to the FBI, cyber threat actors are actively creating deceptive websites designed to imitate official FIFA infrastructure in an effort to steal personal information, collect financial data, distribute fraudulent products, and facilitate additional cyber-enabled scams targeting global football fans ahead of the tournament.

Federal authorities stated the spoofed domains are being engineered to closely resemble FIFA’s legitimate online infrastructure by using altered spellings, fake subdomains, alternate top-level domains, and typo-squatting techniques intended to deceive users into believing they are interacting with official FIFA-operated services.

Investigators warned that the fraudulent sites are being used to collect personally identifiable information including names, physical addresses, phone numbers, email accounts, banking information, and payment details. Authorities stated the stolen information can later be used for identity theft, financial fraud, credential abuse, account creation fraud, phishing operations, cryptocurrency scams, and additional cybercrime activity.

The FBI specifically warned that threat actors are targeting individuals searching for World Cup tickets, hospitality packages, FIFA-related employment opportunities, tournament merchandise, fan packages, travel coordination services, and event access information.

Federal investigators identified multiple malicious domains already tied to the campaign, including fraudulent ticketing platforms, fake hiring portals, cloned FIFA branding pages, deceptive World Cup merchandise sites, and spoofed infrastructure using altered domain extensions designed to imitate official FIFA web properties.

Authorities warned that cybercriminals frequently exploit major international events to launch high-volume fraud campaigns due to the enormous global traffic surrounding ticket sales, international travel, sporting events, hospitality demand, sponsorship activity, and media attention.

The FBI stated that typo-squatting remains one of the primary techniques being used in the operation. These attacks rely on users accidentally mistyping URLs, clicking manipulated search results, or interacting with paid advertisements that redirect victims to malicious infrastructure controlled by threat actors.

Federal investigators also warned that some spoofed domains may appear highly convincing due to cloned branding, copied graphics, professional layouts, embedded payment systems, SSL certificates, and imitation login portals designed to mirror legitimate FIFA web services.

The campaign reflects a broader cybersecurity trend involving the weaponization of large-scale sporting events, entertainment events, and international gatherings by cybercriminal groups seeking to exploit public excitement, urgency, and heavy online traffic volume.

Cybersecurity investigators continue monitoring the increasing use of fake domains connected to sporting events, political campaigns, cryptocurrency launches, disaster relief efforts, major concerts, and holiday shopping seasons where threat actors attempt to rapidly monetize public demand through credential theft, phishing, malware delivery, fraudulent ecommerce systems, and fake payment portals.

The FBI urged users to manually type “fifa.com” directly into their browser address bars rather than relying on search engine advertisements or third-party links. Federal authorities additionally warned users to avoid clicking sponsored search results, verify all domain spellings carefully, use browser bookmarks for trusted services, and avoid submitting sensitive personal or financial information to unverified websites.

Authorities also encouraged users to remain cautious of websites using poor-quality graphics, suspicious branding inconsistencies, unusual payment requests, cryptocurrency-only transactions, or unofficial domain structures tied to FIFA-related services.

The FBI stated victims who may have interacted with fraudulent websites should report incidents to the Internet Crime Complaint Center (IC3) and preserve any available information including domain names, financial transaction records, payment details, cryptocurrency wallet addresses, screenshots, communications, and related evidence tied to the interaction.

Federal investigators anticipate additional malicious FIFA-related domains will continue appearing leading up to and throughout the 2026 FIFA World Cup as cybercriminal groups expand operations targeting fans, travelers, vendors, and international visitors connected to the tournament.

---

Federal Bureau of Investigation (FBI) / Internet Crime Complaint Center (IC3)

---

---

---

---

---

---

---

---

---

---

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

---

---

---

---

---