Kaspersky has identified a rise in scam campaigns exploiting anticipation around the FIFA World Cup 2026, targeting football fans through fraudulent ticketing websites, fake merchandise stores, and phishing emails — including one variant falsely offering recipients a US$500,000 grant.

The cybersecurity vendor’s researchers uncovered multiple attack types in the lead-up to the tournament, which is scheduled for summer 2026. The scams combine financial fraud with data theft, with victims at risk of losing both money and sensitive personal information.

How the scams work

Among the methods identified, fraudulent websites mimic the official visual identity of the 2026 FIFA tournament to sell fake tickets, accepting payment in multiple currencies before disappearing with both funds and card details. Separate sites offer heavily discounted official merchandise, including mascot merchandise and apparel, and use fabricated trust badges and registration forms to harvest personal and banking data.

Phishing emails represent a third attack vector. Kaspersky researchers documented examples where recipients received emails purportedly from tournament officials referencing a dispute resolution chamber decision, with links leading to phishing pages. In other cases, targets were told they had won a US$500,000 grant covering tickets, flights and accommodation — a pretext designed to elicit contact with the fraudsters.

Seemingly harmless or even appealing emails can often conceal not only dangerous links and malicious attachments. In some cases, careless interaction with such messages can lead to serious device infections. — Anna Lazaricheva, Senior Spam Analyst, Kaspersky

What fans should watch for

Kaspersky advised users to verify website authenticity before entering personal or payment data, use only official platforms for ticket purchases and streaming, and enable multi-factor authentication on financial accounts. The company also recommended scrutinising sender details before opening any email attachments or clicking links related to the tournament.

Major sporting events with global audiences are a recurring target for scammers, who adapt their tactics to match the scale and emotional investment of the occasion. The 2026 World Cup is co-hosted by the United States, Canada and Mexico.