Cybercriminals Create 19,000 FIFA-Themed Domains Ahead of 2026 World Cup

As the 2026 FIFA World Cup approaches, cybercriminals are intensifying their efforts to capitalize on the global excitement, transforming the event into what Intel 471 describes as "the largest and most complex cyberattack surface in sporting history." A recent report reveals that approximately 19,000 domains incorporating "FIFA" have been registered since January 2026, serving as the infrastructure for extensive malicious activities. These newly created domains are primarily leveraged for sophisticated phishing campaigns. Threat actors are designing fraudulent websites that mimic official World Cup resources, offering fake tickets, merchandise, and hospitality packages to lure unsuspecting fans. The objective is to steal sensitive personal and financial information, including credentials and payment details. Examples of such deceptive domains include fifa.pink, fifaticket2026vip.com, and fifa-com.xyz, among others. The scope of these cyber threats extends beyond individual consumer scams. Authorities like the FBI and Meta have issued separate warnings, highlighting the coordinated nature of these operations. Meta, for instance, collaborated with Visa to dismantle a scam network that exploited FIFA World Cup 2026 branding to redirect users to illicit gambling platforms. The FBI has cautioned against spoofed FIFA websites and fraudulent offers, emphasizing the diverse tactics employed by threat actors. Moreover, the report points to a history of compromises targeting football organizations themselves. In April 2026, a threat actor allegedly breached the Fédération Royale Marocaine de Football, publishing sample files containing sensitive data such as names, nationalities, dates of birth, addresses, email addresses, phone numbers, passport numbers, and FIFA IDs. A similar incident in the same month involved claims of a leaked dataset from the Asian Football Confederation, purportedly containing thousands of passport records, email addresses, and contract files. These incidents underscore the broader data protection risks associated with major sporting events and the need for robust cybersecurity measures across all involved entities. Fans are advised to exercise extreme caution and vigilance when seeking information, tickets, or accommodations related to the World Cup. It is crucial to verify the legitimacy of websites and offers, relying only on official channels and trusted sources to avoid falling victim to these pervasive cybercriminal schemes. The sheer scale of the event, with millions of visitors and billions of spectators anticipated across 16 host cities in the United States, Canada, and Mexico, presents an unprecedented opportunity for cybercriminals, making heightened awareness and proactive security measures paramount.