The FBI has issued a warning about dozens of fake FIFA websites designed to steal personal data and money from fans ahead of the 2026 World Cup. The spoofed sites mimic official FIFA platforms, tricking users into entering sensitive information.

How the Scams Work

Cybercriminals register domain names that closely resemble official FIFA sites. They use slight misspellings or alternative top-level domains. Fans searching for tickets, travel packages or tournament updates may land on these fraudulent pages.

The fake sites ask for credit card numbers, passport details and login credentials. Some even prompt users to download malicious files disguised as schedule apps or fan guides. Once captured, the data can be sold on dark web markets or used for identity theft.

The FBI also noted that some scams attempt to trick victims into sending money directly for nonexistent ticket packages or hospitality experiences. These phishing campaigns ramp up in the months before major sporting events.

Why This Matters

Millions of fans will look for information and tickets for the 2026 World Cup which will be hosted across the United States, Canada and Mexico. The tournament is expected to draw record attendances and online interest.

Anyone searching for official FIFA content is at risk. Victims could face financial losses, identity fraud or compromised accounts. The FBI advises fans to verify website URLs carefully and to use only the official FIFA.com domain or verified partners.

Organizations have a role too. FIFA and national football associations should enhance takedown efforts and public awareness campaigns. Law enforcement agencies across North America are coordinating to identify and shut down these phishing operations.

This threat is not limited to the 2026 World Cup. Similar scams have targeted past tournaments including the 2022 World Cup in Qatar and the 2018 World Cup in Russia. Cybercriminals follow the global attention cycle of major events.

Fans should also watch for phishing emails that appear to come from FIFA or travel agencies. These emails often contain links to spoofed sites or attachments with malware. The FBI recommends hovering over links to check the real destination before clicking.

If someone suspects they have visited a fake FIFA site, they should change passwords immediately and monitor financial accounts for suspicious activity. Reporting the site to the FBI's Internet Crime Complaint Center can help prevent further scams.