Kaspersky has warned that cybercriminals are exploiting excitement surrounding the 2026 FIFA World Cup by targeting travellers, businesses and property owners with fake ticket deals, phishing websites and fraudulent partnership offers.
The cybersecurity firm said thousands of football fans preparing their trips to host cities are becoming targets for scams involving discounted airline tickets, hotel bookings and fake match passes.
Among the schemes detected was a fraudulent Spanish-language website impersonating a popular transport app in Mexico. The fake platform asked users to enter phone numbers and passwords to supposedly “claim prizes”, allowing scammers to steal personal credentials.
Kaspersky’s Digital Footprint Intelligence team also uncovered dark web advertisements offering discounted World Cup-related services, including flights, accommodation and match tickets allegedly priced 20% below market rates. Victims risk losing both money and promised services through such scams.
The company said businesses connected to the travel and tourism sector are also being targeted. Fraudsters have reportedly created fake websites mimicking accommodation booking platforms to steal account details from property owners, potentially leading to unauthorised withdrawals and financial losses.
Another scam involves cybercriminals posing as airline representatives seeking suppliers or contractors for fictitious business partnerships. Victims are later asked to pay refundable “deposits” to secure positions on partner selection lists, though the payments are never returned.
Senior spam analyst at Kaspersky Anna Lazaricheva said travellers should be cautious of offers that appear too attractive and verify websites before entering personal or financial information.
Kaspersky advised users to rely on official ticketing platforms, enable multi-factor authentication and use reliable cybersecurity protection to block phishing attempts and malicious links.
