FBI warns of fake FIFA websites and over 4300 fraudulent domains targeting 2026 World Cup fans for ticket and identity fraud
The FBI warned of fake FIFA websites targeting fans ahead of the 2026 World Cup, with researchers tracking more than 4,300 lookalike domains registered since August 2025, according to BleepingComputer. Domains use minor misspellings and alternate TLDs to steal payment and identit
The FBI has warned of large-scale fraud targeting fans ahead of the 2026 FIFA World Cup, which begins June 11 across the United States, Canada and Mexico, BleepingComputer reports. Cybersecurity researchers have logged more than 4,300 fake FIFA domains registered since August 2025, many built around minor misspellings such as fiffa.com or alternate top-level domains like .org, .xyz, .live and .sale. The fraudulent sites push counterfeit tickets, fake hospitality packages, bogus immigration services and merchandise scams, collecting names, addresses, phone numbers and banking details that can be reused for identity theft. A Chinese threat actor tracked as Ghost Stadium is reportedly behind a portion of the cloned FIFA properties. The FBI recommends typing fifa.com directly into the browser and avoiding sponsored search results.