World Cup Fans Face Sophisticated Scams as Cybercriminals Leverage AI

The 2026 FIFA World Cup has become a prime target for cybercriminals, with the largest tournament in history creating an unprecedented opportunity for scams. According to Tarek Jammoul, regional managing director at cybersecurity firm TrendAI, over 13,000 FIFA-themed domains were registered between January and May 2026, with roughly one in 41 identified as suspicious or malicious before a single match was played. The rise of AI-generated websites, deepfake videos, and convincing phishing campaigns has made it increasingly difficult for fans to spot scams. David Holtzman, chief strategy officer at Naoris Protocol, notes that the World Cup is the perfect opportunity for scammers, as it combines a large audience with a sense of excitement and urgency.

Research by cybersecurity firm Group-IB identified over 4,300 fraudulent domains impersonating FIFA's official web presence, alongside six parallel fraud schemes and four independent threat actors operating ahead of the tournament. Common scams include fake ticket sales, fraudulent immigration or visa-related services, and misleading accommodation offers. Experts warn that AI is making attackers more efficient, allowing them to generate highly personalized and professional-looking emails at scale. However, AI is also being used as a defensive tool, with companies relying on collaboration between platforms, cybersecurity firms, and law enforcement to track potential threats.

Fans are advised to be cautious of newer tactics, such as QR code scams, and to verify the authenticity of websites and emails before sharing personal or financial information.

Source: Wired