FIFA World Cup Phishing Scam Uses Fake Reward Pages to Steal Credit Card Data

A large-scale, sophisticated phishing campaign impersonating FIFA World Cup services uses authentication-passing emails, multi-stage geo-cloaked redirectors, and polished fake reward/checkout portals to phish names, addresses, and full payment card details; researchers report thousands of FIFA-themed malicious domains and many fake social accounts, and authorities advise verifying domains, avoiding unsolicited links, and contacting banks if payment details were submitted.