FIFA World Cup 2026: Hackers Target Football Fans With Fake Tickets Sites

Security firms report a large, multi-variant phishing and fraud campaign exploiting FIFA World Cup 2026 interest: over 100 malicious links including fake betting and hotel booking sites, cloned FIFA pages, and payment panels are being used to steal card data, credentials, and intercept OTPs in real time. Researchers (Forcepoint X-Labs, CloudSEK, Netcraft) documented tailored pages for multiple regions, rapid domain registrations, embedded live chat services for social-engineering, and evidence linking parts of the operation to actors in China; defenders are actively blocking the sites.