FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins

FIFA World Cup 2026 has become a major target for coordinated fraud, with thousands of fake websites, malware-infected apps, and stolen account credentials already in circulation before the June 11 kickoff.

• •Group-IB tracked over 4,300 fraudulent FIFA domains since August 2025, with a Chinese-speaking group called GHOST STADIUM operating more than 300 near-perfect copies of fifa.com that capture real account credentials and resell match tickets.
• •Banking malware families like Massiv and Perseus are hidden inside fake streaming apps, using Android accessibility features to intercept passwords, one-time codes, and drain cryptocurrency wallets.
• •Phishing campaigns, counterfeit merchandise shops, and fake betting sites collecting passport scans operate across Facebook, Instagram, Telegram, and WhatsApp, with losses estimated between $71 million and $474 million for ticket fraud alone.
• •