Hundreds of fake websites target World Cup fans

Football fans have been warned about a growing wave of online scams after Kaspersky identified fake websites designed to exploit excitement.

Football fans following the FIFA World Cup 2026 have been warned about a growing wave of online scams after cybersecurity company Kaspersky identified hundreds of fake websites designed to exploit tournament excitement. The company urged supporters to remain cautious when accessing streaming services, betting-related content and other World Cup resources online.

According to Kaspersky, at least 336 fraudulent domains mimicking official World Cup platforms have been detected since the tournament began. These websites are designed to appear legitimate and often imitate official FIFA resources in an attempt to steal users’ personal information and money.

One of the most common scams involves fake streaming platforms that promise free access to World Cup matches. Users are encouraged to click “watch now” links and register for supposedly unlimited access. However, registration often requires payment in cryptocurrency, leaving victims at risk of losing both their money and personal information.

Cybercriminals are also using fraudulent prediction and sports-analysis websites to lure football enthusiasts. Some platforms request extensive personal details, including names, phone numbers and email addresses, while others charge fees for access to match predictions and analytics that may never be delivered. These schemes can expose users to identity theft, credential theft and financial fraud.

Experts say scammers frequently create a sense of urgency through emails and online advertisements, pressuring recipients to act quickly before an offer supposedly expires. Similar warnings have been issued by international cybersecurity agencies and law-enforcement organisations, which have reported thousands of World Cup-related scam domains and phishing campaigns targeting fans worldwide.

Kaspersky advises fans to use only official and reputable platforms, verify website addresses carefully, and avoid sharing personal or financial information on unfamiliar websites. Experts also recommend checking URLs for spelling errors and suspicious domain names before entering any sensitive data.