The Purchase Scam Tactic Headed for the World Cup | Recorded Future

Recorded Future's Payment Fraud Intelligence documents a large, active purchase-scam campaign (tracked as AEGIR) that compromises legitimate, well-ranked sites to plant search-indexed product listings which selectively redirect organic search visitors to scam domains; operators process payments through rotated/misused merchant accounts, steal payment card data, and employ domain rotation, cloaking, and merchant descriptor anomalies to evade detection—resulting in millions of visits and significant consumer financial risk around event-driven demand (e.g., the 2026 World Cup).