Cybercriminals Register 13,000 FIFA Domains for 2026 World Cup Scams as AI Sharpens Phishing
Updated
Updated · WIRED · Jun 22
Cybercriminals Register 13,000 FIFA Domains for 2026 World Cup Scams as AI Sharpens Phishing
3 articles · Updated · WIRED · Jun 22
Summary
More than 13,000 FIFA-themed domains were registered from January to May 2026, and about 1 in 41 had already been flagged as suspicious or malicious before the tournament began.
AI is making familiar scams harder to detect by producing polished phishing emails, fake ticketing sites, deepfake audio and video, and QR-code traps that mimic legitimate World Cup communications.
Group-IB identified more than 4,300 fraudulent domains impersonating FIFA, along with six parallel fraud schemes and four threat actors targeting ticket sales, visas, accommodation, merchandise, and streaming offers.
The risk is amplified by the tournament's scale: the U.S., Canada, and Mexico will host 104 matches across 16 cities, while FIFA says more than 6 million fans will attend and 150 million ticket requests arrived in the first 15 days.
Cybersecurity firms say AI is also strengthening defenses through faster threat detection, but they warn technology alone will not stop scams without coordination among platforms, security companies, law enforcement, and more vigilant fans.
With AI making scams indistinguishable from reality, how can fans ever trust online offers for major events again?
As AI now powers both cyberattacks and defenses, are security firms truly winning or just delaying an inevitable breach?
Billions at Risk: The Industrialization of AI-Driven Cyber Threats Targeting the 2026 FIFA World Cup
Overview
As the 2026 FIFA World Cup approaches across the US, Canada, and Mexico, cybercriminal activity is surging to unprecedented levels. Threat actors are rapidly adapting their infrastructure, creating a complex and immediate risk environment for both individuals and organizations. Security researchers have observed significant spikes in malicious domain registrations, which serve as the foundation for sophisticated scams and malware distribution. Cybercriminals can quickly establish new avenues for illicit activities, including fake websites and deceptive applications that target fans and businesses. This evolving threat landscape highlights the urgent need for heightened vigilance and robust cybersecurity measures as the tournament draws near.