World Cup 2026 Fraud Wave Includes Phishing, Fake Stores, Wallet Theft, and FIFA Platform Exposure

Cybercriminals launched multiple parallel fraud campaigns around the 2026 FIFA World Cup, using fake merchandise stores, cloned FIFA portals, bogus ticketing and betting sites, QR-code and SMS lures, and cryptocurrency scams to steal credentials, payment card data, and personal information. Researchers reported more than 13,000 FIFA-themed domains registered between January and May 2026, with a notable share deemed malicious or suspicious, while one purchase-scam cluster alone used about 33 domains and roughly 2,500 online ads to impersonate major sports brands and push victims into WhatsApp-based social-engineering funnels. Analysts also identified persistent portal-cloning kits with mirrored SSO flows and hundreds of static HTML files, as well as rapidly rotated betting and traffic-monetization domains that redirected users through affiliate-tracked overlays and iframes.