FBI warns of 4,300+ fake FIFA sites ahead of 2026 World Cup

With the 2026 FIFA World Cup set to begin next month, law enforcement and cybersecurity firms are warning of a massive surge in fraudulent websites designed to steal money and personal information from fans. The FBI has issued a public alert about the threat, while private researchers have uncovered thousands of fake domains and sophisticated phishing operations targeting the global tournament.

The FBI’s Internet Crime Complaint Center warned this week of at least 35 spoofed FIFA websites that mimic legitimate domains through subtle spelling changes or alternative top-level domains, a tactic known as typosquatting. Officials said these sites are crafted to harvest personally identifiable information, including names, addresses, and banking details, and to sell counterfeit tickets and hospitality packages. The agency advises fans to access FIFA’s website only by typing “fifa.com” directly into a browser and to avoid sponsored search results, which can lead to paid imitators.

The scale of the threat is far larger, according to cybersecurity firm GroupIB. Its investigation, which ran from March to May 2026, identified more than 4,300 fraudulent domains impersonating FIFA’s official...