Thousands of Fake FIFA Domains Target World Cup Fans

Over 4,300 fraudulent domains impersonating FIFA's official websites have been created to target fans of the upcoming 2026 FIFA World Cup. This operation, identified by Group-IB, involves multiple fraud schemes and actors, with many sites ready to activate as the event approaches. One key player, named 'Ghost Stadium,' operates over 300 phishing sites that closely mimic FIFA's functionalities. The fraudulent schemes are heavily promoted via paid Facebook advertisements.

Group-IB warns that premium ticket fraud could result in losses between $71 million and $474 million, stressing the importance for fans to book tickets exclusively through the official FIFA site and enable multi-factor authentication. Brand protection teams are advised to monitor inactive domains for activity.