Ticket scams, fake streaming websites and dodgy domains: the security threats facing football fans ahead of the World Cup 2026 | Tech Radar
Overview
News, deals, reviews, guides and more on the newest computing gadgets
Start exploring exclusive deals, expert advice and more
Details
Unlock and manage exclusive Techradar member rewards.
Unlock instant access to exclusive member features.
Get full access to premium articles, exclusive features and a growing list of member rewards.
Ticket scams, fake streaming websites and dodgy domains: the security threats facing football fans ahead of the World Cup 2026
When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.
(Image credit: Michael Regan - FIFA/FIFA via Getty Images)
As the World Cup 2026 kicks off, the planet's biggest sporting tournament is set to draw in billions of viewers, as well as the hundreds of thousands of fans attending games across the USA, Mexico and Canada.
However the event is also set to be fertile ground for online scammers and hackers, who will be looking to capitalize on the excitement to trick unwary victims.
Here's our guide to spotting the most dangerous scams and tricks online during the World Cup - and how you can stay safe.
With the event taking place across the American continent and time zones, and entry to some of these countries already proving difficult, many fans will be forced to watch their country on broadcast television, or online.
'This enormous demand...has made the football tournament a magnet for fraud': Experts warn scammers are ramping up their work ahead of the FIFA World Cup 2026 — here's how to avoid being hit
One month out from the World Cup, and scammers are already targeting fans
FIFA websites spoofed by hackers ahead of 2026 World Cup, FBI warns
Arctic Wolf security researchers have warned that, with timing issues proving tricky for lots of fans, many will be searching for last-minute viewing options, and so some malicious sites recruit subscribers with a promise to drop a “free stream” link (pictured above) five minutes before each match begins, but then are designed to detonate at the last moment after luring victims in.
Even legitimate services may be at risk, as popular streaming services are frequent targets for credential-stuffing attacks, where stolen usernames and passwords from previous breaches are used to gain access to accounts.
So the name of the game - be on your guard when searching for online streams, and if an offer seems to good to be true - it probably is.
With World Cup tickets in high demand by desperate fans, and FIFA attracting widespread criticism for the eye-watering prices introduced for this tournament, fans may understandably try turning to alternative sources.
FIFA World Cup 2026 hype kicks off fraud, fake apps, and ransomware targeting fans and businesses
7 in 10 World Cup football fans are ready to put their digital privacy at risk, warns Express VPN
World Cup 2026: how mobile networks can avoid cybersecurity chaos at kick-off
However this may not be a great idea, as fans may encounter fake promotions, prize giveaways, or subscription offers tied to the tournament that are designed to collect personal information or payment details.
Arctic Wolf flagged one campaign using a ticket lure that includes a decoy JPEG to distract the victim, however when clicked on, an infostealer malware is dropped onto a victim's device, where it harvests browser secrets such as cookies, saved passwords, autofill and payment-profile data, browsing and search history, messaging and session material, clipboard contents and a desktop screenshot, saved Wi-Fi profiles and passwords, and a wide range of application credentials.
Along with more blatant scams, criminals are also busy preparing and running fake websites, again purporting to host ticket giveaways or offers, but in reality will just be stealing valuable personal data.
Arctic Wolf found that since January 2026, more than 10,000 new domains were registered under the broad umbrella of the World Cup, approximately 2000 new domains per month - many of which are legitimate, but the temptation is just too much for some scammers.
Experts from Cyfirma also reported such sites actually spiking in August and September 2025, as scammers tried to prepare early, with peak registrations exceeding 300 domains per day.
They warn that cloned FIFA interfaces may be combined with fake customer support channels or AI-generated phishing emails to increase legitimacy and improve victim conversion rates.
Unfortunately, the rise in AI-generated content will also further increase the likelihood of highly convincing multilingual scams targeting international audiences.
"Looking ahead, organizations supporting the FIFA World Cup 2026 should anticipate a dynamic threat environment where cybercrime, hacktivism, disinformation, and state-linked cyber activity increasingly overlap," the experts note.
"Continuous threat intelligence collection, proactive monitoring of malicious infrastructure, and coordinated cybersecurity efforts across public and private sector stakeholders will be essential to identifying emerging threats and maintaining operational resilience throughout the tournament lifecycle."
Even at the games, you may still be at risk, as criminals may try and exploit the excitement of being at the tournament to target those letting down their guard.
In particular, fans should watch out for unverified public Wi-Fi networks, as areas such as airports, hotels, stadiums, and fan zones often become hotspots for rogue Wi-Fi networks designed to intercept credentials or redirect users to malicious websites.
The rise in QR-code usage has also led to an increase in QR-code scams, sometimes referred to as "quishing." These attacks can trick users into visiting fake sites offering tickets or giveaways that request personal information or payment details.
Arctic Wolf notes that quishing is even targeting the organizers of the tournament, with one scam targeting employees working on the games being held in the US city of Philadelphia.
The team found a purpose-built PDF entitled “Employee Handbook – Understanding employment at FIFA World Cup 26 Philadelphia”, styled with the Liberty Bell and a credible HR layout, and metadata names the city’s legitimate tourism organization (discoverphl.com) and an intended recipient inside.
However, the document ends by asking the victim to scan a QR code “to access the digital version of the handbook,” complete with a friendly step-by-step guide to opening their camera and tapping the (malicious) link.
So the message is - it doesn't matter who you are, or where you're watching, be on the lookout for potential scams, or the only own goal you could be facing is your own.
Mike Moore is Deputy Editor at Tech Radar Pro. He has worked as a B2B and B2C tech journalist for nearly a decade, including at one of the UK's leading national newspapers and fellow Future title ITPro Portal, and when he's not keeping track of all the latest enterprise and workplace trends, can most likely be found watching, following or taking part in some kind of sport.
You must confirm your public display name before commenting
1 Ticket scams, fake streaming websites and dodgy domains: the security threats facing football fans ahead of the World Cup 2026
2 Browse securely, without limits — Mozilla scraps data cap on Firefox's free VPN for the whole summer
3 The risks are 'real, measurable, and increasing': Canada is the latest country to move to ban social media for under-16s
4 Mint Mobile's huge new Galaxy S26 Ultra deal cuts $500 off without the usual trade-in — a new record-low on 'the best Android phone ever'
5 Intel claims its Wildcat Lake notebooks 'reimagine mainstream laptops' — and are ready to take on the Mac Book Neo
Tech Radar is part of Future US Inc, an international media group and leading digital publisher. Visit our corporate site.
© Future US, Inc. Full 7th Floor, 130 West 42nd Street, New York, NY 10036.
Key Takeaways
- News, deals, reviews, guides and more on the newest computing gadgets
- Start exploring exclusive deals, expert advice and more
- Unlock and manage exclusive Techradar member rewards
- Unlock instant access to exclusive member features
- Get full access to premium articles, exclusive features and a growing list of member rewards
