Cybersecurity company flags hundreds of fake websites targeting FIFA World Cup fans

ISLAMABAD: Cybersecurity company Kaspersky has warned FIFA World Cup fans to be careful with unofficial streaming and betting platforms to avoid losing money and personal data.

The World Cup 2026 kicked off on June 11, and alongside it, the number of scammers attempting to exploit fan excitement has also increased.

According to Kaspersky, at least 336 unique domains mimicking official World Cup resources have been detected.

In addition, cybercriminals are actively exploiting growing interest in match streaming and sports betting.

Since the start of the tournament, the Russian company said, “fraudsters have been creating websites offering ‘online streaming’ of the championship.”

Attackers have set up fake websites claiming to provide “free access to World Cup broadcasts”, it said, adding that after users click “watch now” on the site, they are prompted to register.

Registration requires them to pay a cryptocurrency fee for “lifetime tournament access”.

“The danger of this scheme lies in the potential loss of both registration data and cryptocurrency funds,” it stated.

Football fans are also being targeted by fraudulent betting and match prediction platforms.

The cybersecurity company added that a Spanish-language website was found requesting extensive personal information, including first and last name, email address, phone number and more, under the guise of account creation.

“Such schemes expose users to credential theft, particularly if they reuse the same password across multiple services, as well as to potential financial loss,” Kaspersky stated.

“We recommend that users stick to official broadcasts to help protect their data and finances,” says Olga Altukhova, senior web content analyst at Kaspersky.

Attackers have also attempted to trick users into sending money or clicking phishing links.

“To increase engagement, these messages often use compelling subject lines and persuasive wording,” the company said, adding that in one case it had observed, fans received emails advertising football analytics services and match winner predictions.

The company added that “a notable feature is the sense of urgency, asking recipients to act quickly, which is one of the common indicators of a possible scam email.”

In these cases, users have been asked to pay a fee to access football analytics, Kaspersky said.

“While the offer targets fans interested in betting, paying for such ‘services’ can potentially result in irreversible financial loss,” it stated.

The company advised users to check the authenticity of websites before entering personal data.

Users should also double-check URL formats and the spellings of organisations’ names.

Football fans should choose official and reputable streaming platforms to protect personal data from theft and misuse, the cybersecurity company recommended. ...