With the 2026 FIFA World Cup approaching, criminals are intensifying football-themed scams to steal money and personal data. US authorities have warned about convincing copycat FIFA websites, and security researchers have tracked dozens of football scams across social media, fake shops, phishing emails, and bogus streaming offers. UK fans seeking tickets, travel, or TV coverage are prime targets.
How Scammers Operate
Limited tickets, time-sensitive offers, and high-emotion messages push people to click and pay without verifying. Many sites mimic the look and feel of official FIFA channels, making it hard to distinguish real from fake. Scams extend beyond tickets to counterfeit shirts, memorabilia, and malware-laced streams.
Biggest Risks
Scammers exploit major events, and the World Cup is no different. Familiarise yourself with these warning signs:
- Fake FIFA and ticketing sites nearly identical to official pages (e.g., flfa.com, fifa-tickets2026.com, fifaa.shop).
- Phishing pages harvesting name, address, phone, email, and card details.
- Emails and texts claiming 'ballot winner' or 'priority access,' pressuring instant payment.
- Social posts and classifieds offering 'just released' seats, requesting bank transfer or crypto, or hiding behind disposable emails.
- 'Mobile tickets' that are screenshots, often fake or duplicated.
- Free World Cup stream sites demanding browser extensions, player downloads, or card details for a fake '£1 trial.'
- Lookalike apps on unofficial app stores imitating broadcasters.
- Social media giveaways asking you to 'verify identity' or pay a 'shipping fee.'
- Fake packages bundling 'guaranteed tickets' with flights or hotels; nonexistent accommodation listings.
How to Verify an Offer
To protect yourself, always start from official sources. Navigate to the official site via a trusted bookmark or a search result you verify yourself—don't rely on ads or links sent to your phone or inbox, especially if unexpected.
When visiting any site, check the URL, not just the padlock: HTTPS and a padlock don't guarantee legitimacy. Look for misspellings, extra words, strange domain endings, and hyphens. If buying from an unknown business, verify it via Companies House, check for a geographic address and working phone number, and search independent reviews. Beware of sites with only recent, generic five-star ratings.
For payments, avoid bank transfer, crypto, gift cards, or 'friends and family' payments. Use a credit card for Section 75 protection or a debit card with chargeback. Remember: if an offer seems too good to be true, it probably is. Massive discounts on 'official' kits, last-minute 'VIP tickets,' or guaranteed access during high demand are classic lures.
For UK TV broadcasts, rely on announcements from FIFA and well-known UK broadcasters (e.g., BBC, ITV) or their official apps and websites.
Practical Protection Steps
While vigilance is key, these steps can reduce scam risk:
- Strengthen accounts: Use a strong, unique password for email, ticketing, and payment accounts; enable two-step verification.
- Freeze the impulse: If a deal expires 'in minutes,' step back. Scammers weaponise urgency.
- Use device protection: Keep phones and browsers updated; enable built-in malicious site blocking; consider reputable security software.
- Back up proof: Keep official receipts and confirmations in one place. Take screenshots of order pages and confirmation numbers.
What to Do If Scammed
If you think you are a victim, contact your bank immediately and explain it's fraud. They can advise on the best course and limit further exposure. After speaking to them, change your passwords and ensure two-step verification is in place where available. Run a security scan on any compromised devices, including phones, tablets, laptops, and PCs.
To protect yourself and others, report it to relevant authorities:
- Suspicious emails: forward to report@phishing.gov.uk (NCSC's Suspicious Email Reporting Service).
- Suspicious texts: forward to 7726 (free).
- Fraud or losses: report to Action Fraud at actionfraud.police.uk or 0300 123 2040.
If significant personal data may have been shared, consider CIFAS Protective Registration to help protect against credit fraud.
As ticket phases, travel plans, and broadcast plans take shape, scammers will mirror every official announcement with convincing fakes. Start from official channels, pay with protection, slow down when rushed, and report anything suspicious. A few checks now can save your money, data, and World Cup experience.
