FLASH
Shkruar nga Pamfleti
The great enthusiasm for the 2026 World Cup is being exploited by cybercriminals, who have set up fake websites that almost perfectly mimic FIFA's official portal for selling tickets and VIP packages.
According to cybersecurity experts, this is an active fraud operation targeting fans from all over the world, with the aim of stealing personal and banking data.
How does the scheme work?
Fraudsters have created an almost identical copy of the official FIFA hospitality portal, using national team logos, colors, crests and even links to authentic FIFA documents to make the site look as credible as possible.
The platform also includes automatic translation systems, which adapt content to the user's language, increasing the potential number of victims.
In the first stage, visitors are asked to register with their email address and password, just like with a real FIFA account. However, all the data entered ends up directly in the hands of the scammers.
How are bank details stolen?
The process becomes even more dangerous at the point of payment. After choosing a package, users enter their bank card details, which are immediately captured by the fraudsters.
The criminals then attempt to make a real payment using the stolen card. When the bank sends the verification code via SMS, the fraudulent site prompts the user to enter that code, presenting it as a normal part of the purchase process.
Once the code is entered, the fraudsters use it in real time to authorize the transaction. The victim receives a fake order confirmation and often does not immediately realize that they have fallen victim to the scam.
How to recognize a fake page?
Although these platforms appear professional and use authentic FIFA materials, experts emphasize that the most important element to check remains the website address.
The official FIFA portal operates only through its official domain, while fraudsters use similar addresses with suffixes such as ".shop", ".store", ".net" or other variants that can go unnoticed.
US authorities have already warned about the existence of these fraudulent websites in the run-up to the 2026 World Cup.
Warning signs
Experts recommend being careful if :
The website address does not match the official FIFA domain;
The payment process redirects you to another page;
The payment platform seems unfamiliar or suspicious;
You are required to enter the bank verification code during purchase;
Familiar payment logos appear, but the procedure seems unusual.
How to protect yourself?
To avoid the risk of fraud, experts advise that fans access ticket portals only through the official FIFA website and carefully check the full website address before providing personal or financial details.
Also, if the payment process sends you to another platform or if you suspect that you have entered your details on a fake page, contact your bank immediately to block the card and prevent unauthorized transactions.
Increasingly sophisticated scams
According to cybersecurity specialists, these are no longer simple schemes that collect data for later use. The perpetrators monitor every user action in real time and react immediately once they receive security codes.
With millions of fans expected to follow the 2026 World Cup closely, the huge interest in tickets and VIP packages is turning into a golden opportunity for online criminal groups. For this reason, experts are calling for maximum vigilance, emphasizing that a single click on the wrong page can lead to significant financial losses.
Lini një Përgjigje