FBI warns of fake FIFA websites running World Cup fraud schemes

The FBI warns of a widespread fraud campaign ahead of the 2026 World Cup in which threat actors have created hundreds of phishing websites and fake portals impersonating FIFA (using lookalike domains and alternative TLDs) to steal personal and payment data, sell counterfeit tickets and merchandise, and run other scams; cybersecurity firms Group-IB and Bitdefender have observed malvertising and targeted campaigns across multiple countries, including a large operation attributed to a group tracked as Ghost Stadium, and the advisory includes recommended protective actions and reporting guidance.