World Cup scams have increased significantly since the tournament began on June 11, 2026, according to a warning from cybersecurity firm Kaspersky. The company detected at least 336 unique domains mimicking official tournament resources. Cybercriminals are actively exploiting the growing interest in match streaming and sports betting to target football fans globally.
Understanding World Cup scams
These World Cup scams target users who are looking for convenient ways to watch matches online. Since modern viewing requires only an internet connection and smart devices, attackers find it easier to reach a broad audience. Consequently, fraudulent websites offering streaming and betting services have emerged in multiple languages.
Mechanics of Fake Streaming Platforms
The fake broadcasting scheme operates by setting up websites that claim to provide free access to matches. When users click the watch button, the platform prompts them to register. Subsequently, the site requests a cryptocurrency fee for lifetime tournament access, leading to potential financial loss.
In addition to losing digital currency, users risk exposing their registration credentials. This threat is particularly severe for individuals who reuse passwords across multiple online services. Meanwhile, security researchers advise against interacting with any unofficial broadcast links.
Fraudulent Betting and Email Schemes
Another threat vector involves fraudulent betting and match prediction platforms. For instance, researchers identified a Spanish-language website requesting extensive personal information, including names, email addresses, and phone numbers. This harvested data can be used for identity theft or credential stuffing attacks.
Furthermore, attackers are using email spam to distribute phishing links and demand payments. Some fans received emails advertising football analytics services for a fee of 200 Australian dollars. These messages often use urgent language to pressure recipients into making quick, irreversible financial transactions.
“Since the start of the tournament, scammers have increasingly focused on the ways fans engage with the event online, as watching matches today requires only an internet connection and a device. As a result, criminal activity continues to grow, as reflected in the fraudulent websites we observe offering streaming and betting services in multiple languages. We recommend that users stick to official broadcasts to help protect their data and finances.”
Olga Altukhova, Senior Web Content Analyst at Kaspersky
Security Recommendations to Prevent Data Theft
To mitigate the risks associated with World Cup scams, users should verify website authenticity before entering personal data. Specifically, individuals must double-check URL formats and the spelling of organization names. Choosing official and reputable streaming platforms remains the most effective defense against credential harvesting.
Additionally, implementing multi-factor authentication on financial apps helps secure accounts from unauthorized access. Utilizing a reliable security solution can also block malicious attachments and phishing links. Kaspersky, founded in 1997, continues to update its consumer solutions with automated tools to detect these emerging threats.
