FIFA World Cup 2026 Scams Surge As Fake Sites Target Fans

With the FIFA World Cup 2026 starting June 11, cybercriminals are running large-scale fraud campaigns using fake FIFA-affiliated websites. The FBI issued a PSA flagging over 40 fraudulent domains that use typosquatting to steal PII, sell fake tickets, run bogus hospitality packages, and post fraudulent job listings. Cyble researchers confirmed many domains remain active and noted that fake recruitment sites targeting job seekers are a particularly overlooked threat vector. Recommendations include typing fifa.com directly into the browser, avoiding sponsored search results, and using only licensed broadcasters for streaming. Organizations in adjacent sectors are urged to deploy brand protection monitoring proactively.