Kaspersky warns of rise in World Cup scams targeting fans with fake tickets, merchandise
One fraudulent website identified by Kaspersky offered users the chance to buy tickets for World Cup matches using multiple currencies
08 May, 2026
TT
16
Cybersecurity firm Kaspersky said it had identified a rise in online scams linked to the FIFA World Cup 2026, including fraudulent ticket sales, fake merchandise stores and emails falsely promising fans grants worth $500,000.
The company said cybercriminals were exploiting growing interest in the tournament, which begins this summer, by creating websites and emails designed to steal users’ money and personal data.
One fraudulent website identified by Kaspersky offered users the chance to buy tickets for World Cup matches using multiple currencies.
The site mimicked the tournament’s official branding and colour scheme and included customer contact options to appear legitimate.
After completing registration and payment steps, users risked losing money and exposing sensitive personal information, the company said.
Kaspersky also flagged websites claiming to sell official tournament merchandise, including mascot toys and T-shirts, often advertised at steep discounts. Some of the sites displayed “trusted store” badges and prompted users to enter banking and personal details.
The company said scammers were also using email campaigns to target fans. In one example, recipients received emails claiming to be from tournament representatives regarding a fake dispute resolution decision, directing them to phishing websites.
In another case, users were told they had won a $500,000 grant to cover match tickets, flights and accommodation and were asked to contact the sender to claim the funds.
“Unfortunately, major sporting events that attract large audiences are never overlooked by scammers,” said Anna Lazaricheva, senior spam analyst at Kaspersky.
Kaspersky’s tips on being more careful when booking World Cup merch or tickets
“Seemingly harmless or even appealing emails can often conceal dangerous links and malicious attachments,” said Lazaricheva.
The company advised consumers to verify website addresses before entering payment details, avoid suspicious links or attachments and use official ticketing and merchandise platforms.
Keep this in mind
- Check the authenticity of websites before entering personal data and only use official webpages to watch or download movies. Double-check URL formats and organisations name spellings.
- Always choose official and reputable streaming platforms to protect your personal data from theft and misuse.
- Use a reliable security solution that identifies malicious attachments and blocks phishing links. To ensure advanced cyber protection against increasingly complex phishing threats, Kaspersky actively amplifies its consumer solutions with AI-powered scam protection.
- Enable multi-factor authentication and monitor accounts: Activate 2FA on IDs and financial apps, and regularly review statements for unauthorised activity
- Do not trust any links or attachments received by mail; double-check the sender before opening anything.
- Double-check e-shop websites before filling out any information: is the URL correct? Are there any spelling errors or design bugs?
The 2026 FIFA World Cup 2026 is expected to attract millions of fans globally, creating opportunities for cybercriminals seeking to exploit demand for tickets, travel and merchandise.






















