Overview
- The 2026 FIFA World Cup begins Thursday, June 11 and runs through July 19 with 48 teams, a new 32‑team knockout round and 104 matches staged across 16 host cities in the United States, Mexico and Canada.
- Intel 471 reported about 19,000 domains referencing “fifa” created since January 2026, which it calls an unprecedented cyberattack surface for a sporting event and says fuels phishing and credential‑theft campaigns.
- The FBI and Meta have issued public warnings and taken action against scam networks that use spoofed FIFA sites, fake ticket and hospitality offers, and fraudulent gambling links to steal payments and data.
- Investigators and researchers have documented specific fraud methods, including fake receipts used as proof of purchase, underground sellers offering deeply discounted travel and paid visa services, and social posts promoting bogus hospitality packages.
- Security firms have also observed malware campaigns that distribute an Android remote‑access trojan through apps marketed as unofficial IPTV or streaming services, while bookmakers and pay‑per‑head vendors push heavy betting markets and promotions that could amplify consumer risk.