FBI public service announcement on fake FIFA websites
Public Sector Action
Summary
Hide ▲
Show ▼
The FBI warned on May 28, 2026 that fake FIFA websites are being used to steal data and sell fraudulent tickets and hospitality packages ahead of the 2026 World Cup. The PSA points to typosquatted domains such as fiffa[.]com and fake portals like jobs-fifa[.]com and fifa-hiring[.]com. The warning tells fans and online users to verify URLs and avoid suspicious links as the tournament approaches.
Related Happenings
Ghost Stadium FIFA World Cup fraud campaign
Campaign
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
How related:
A major operation that Group-IB researchers attributed to a Chinese threat actor tracked as Ghost Stadium, uses more than 300 phishing sites, clones of the real FIFA portal, for premium ticket fraud.
About this happening:
A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is using **hundreds of phishing sites** and cloned **fifa.com** pages to target **2026 FIFA World Cup** fans with...
Ghost Stadium FIFA World Cup fraud campaign
CampaignHow related: A major operation that Group-IB researchers attributed to a Chinese threat actor tracked as Ghost Stadium, uses more than 300 phishing sites, clones of the real FIFA portal, for premium ticket fraud.
About this happening: A **Ghost Stadium**-linked **FIFA impersonation fraud campaign** is using **hundreds of phishing sites** and cloned **fifa.com** pages to target **2026 FIFA World Cup** fans with...
FIFA logins traded on dark-web markets
Data Leak
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
About this happening:
Around **2,500 FIFA logins** have surfaced on **dark-web markets**, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak i...
FIFA logins traded on dark-web markets
Data LeakAbout this happening: Around **2,500 FIFA logins** have surfaced on **dark-web markets**, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak i...
Formula 1 fan scam ecosystem campaign
Campaign
First: 25.05.2026 12:00
Last: 25.05.2026 12:00
Sources 1
About this happening:
A coordinated scam ecosystem is targeting **Formula 1 fans** with **fake streaming apps**, **counterfeit merchandise**, and **social-media lures**, creating theft, fraud, and malw...
Formula 1 fan scam ecosystem campaign
CampaignAbout this happening: A coordinated scam ecosystem is targeting **Formula 1 fans** with **fake streaming apps**, **counterfeit merchandise**, and **social-media lures**, creating theft, fraud, and malw...
Vercel v0.dev phishing campaign using GenAI-built lure pages
Campaign
First: 07.05.2026 11:30
Last: 07.05.2026 11:30
Sources 1
About this happening:
A campaign using **Vercel v0.dev** to build **highly convincing phishing pages** has lowered the skill and cost needed to run fraudulent sign-in and job-lure attacks. The activity...
Vercel v0.dev phishing campaign using GenAI-built lure pages
CampaignAbout this happening: A campaign using **Vercel v0.dev** to build **highly convincing phishing pages** has lowered the skill and cost needed to run fraudulent sign-in and job-lure attacks. The activity...
Fake shipment tracking SMS phishing campaign
Campaign
First: 16.03.2026 16:45
Last: 16.03.2026 16:45
Sources 1
About this happening:
A **global surge** in **fake shipment tracking phishing campaigns** is stealing **funds and credentials** at scale, with activity rising from almost none in 2024 to **over 100 cam...
Fake shipment tracking SMS phishing campaign
CampaignAbout this happening: A **global surge** in **fake shipment tracking phishing campaigns** is stealing **funds and credentials** at scale, with activity rising from almost none in 2024 to **over 100 cam...
Timeline
-
28.05.2026 22:08 2 articles · 4h ago
FBI warns of fake FIFA websites ahead of the 2026 World Cup
Initial DisclosureThe FBI warned that fake websites impersonating FIFA are targeting World Cup fans and online users in the United States, Canada, and Mexico to steal personal and financial information, sell fake tickets and hospitality packages, and push other fraud tied to the event. The warning cited typosquatted domains such as fiffa[.]com, fake employment portals like jobs-fifa[.]com and fifa-hiring[.]com, and alternative top-level domains including .org, .xyz, .live, and .sale; the same campaign picture also included malvertising and hundreds of phishing sites, with more than 300 phishing sites attributed by Group-IB to Ghost Stadium for premium ticket fraud.
Show sources
- FBI warns of fake FIFA websites running World Cup fraud schemes — www.bleepingcomputer.com — 28.05.2026 22:08
- FBI warns of fake FIFA websites running World Cup fraud schemes — www.bleepingcomputer.com — 28.05.2026 22:08