Lead
The FIFA World Cup 2026, now underway across the US, Mexico, and Canada, has become a magnet for cybercriminals seeking to exploit fan enthusiasm. Multiple warnings have emerged in recent weeks, highlighting the risks of fake streaming sites, fraudulent betting platforms, and ticket scams.
Coverage Comparison
Cybersecurity company Kaspersky has warned FIFA World Cup fans to be cautious when using unofficial streaming and betting platforms, according to a report by Dawn. The company said it has detected at least 336 unique domains mimicking official World Cup resources. These fraudulent sites often offer fake online streaming or claim to provide free access to broadcasts, requiring users to register and pay a cryptocurrency fee for what they call lifetime tournament access.
The FBI, cited by Deutsche Welle, issued a public service announcement in May warning that cyber threat actors are conducting spoofing attacks against the FIFA website ahead of the tournament. The FBI explained that spoofed websites are designed to pose as legitimate sites, often with similar branding and product listings, and are used to further illegal activities such as personal information theft and monetary scams.
Meanwhile, the Jerusalem Post reports that Israeli companies are involved in protecting the tournament against cyber threats. One such company, KELA Group, refers to the World Cup as the largest digital battlefield in history, citing the event's enormous digital attack surface. KELA notes the tournament relies on a massively interconnected digital supply chain, making it vulnerable to disruptions.
Key Claims
- At least 336 unique domains mimicking official World Cup resources have been detected by Kaspersky.
- Fraudsters are creating fake streaming websites that ask users to register and pay a cryptocurrency fee for supposedly lifetime access.
- Fraudulent betting and match prediction platforms are targeting football fans, often requesting extensive personal information.
- The FBI has warned about spoofing attacks against the FIFA website.
- KELA Group is monitoring the Dark Web to identify potential threats to the World Cup.
- Israeli companies are also involved in other aspects of the World Cup supply chain, including ticket resale and sports data analysis.
Kaspersky also noted that a Spanish-language website was found requesting extensive personal information—such as first and last name, email address, and phone number—under the guise of account creation. This exposes users to credential theft, especially if they reuse passwords across multiple services, and to potential financial loss. The company recommends that users stick to official broadcasts to protect their data and finances.
Deutsche Welle reported that FIFA tickets are being sold at exorbitant prices on both official and unofficial platforms. The outlet also mentioned that verified ticket resale sites offer refund guarantees and lower prices, and that the GoalPass app allows users to compare ticket prices across platforms.
Jerusalem Post highlighted the role of Israeli companies in protecting the World Cup. KELA Group highlighted that geopolitics affects state actors attempting to disrupt the event, and that Russian and Iranian threat actors have used intelligence and psychological warfare in the past. The report specifically mentioned Russian hacktivists and Iranian APT groups targeting critical infrastructure.
Perspectives
- Kaspersky warns fans about the risks of unofficial streaming and betting platforms, emphasizing the need to stick to official broadcasts to avoid data and financial loss.
- FBI warns of spoofing attacks against the FIFA website, advising the public to be aware of fraudulent sites that mimic legitimate ones.
- KELA Group emphasizes the enormous digital attack surface of the World Cup and the role of geopolitical state actors, while highlighting Israeli involvement in cybersecurity for the event.