All briefings

Daily brief — July 11, 2026

Today in Scams: World Cup Ticket Fraud, Toll Texts, Fake FTC Agents

As the FIFA World Cup 2026 nears its July 19 final, ticket and toll-text scams are peaking — and so are fake "fund recovery" pitches aimed at people who've already been scammed.

Published July 11, 2026

Key points

  • FBI PSA: spoofed FIFA sites are actively selling fake World Cup tickets/hospitality packages and harvesting personal data through the July 19 final.
  • Unpaid-toll smishing remains a top complaint category and keeps shifting between states, per FBI IC3 data — AVASC logged 520 reports this period, its highest-volume cluster.
  • FTC imposter-scam losses hit $3.5 billion in 2025, nearly triple 2020 levels — and scammers are currently impersonating actual FTC employees.
  • The FBI confirms an active scheme where criminals pose as IC3 staff or "fund recovery" firms to re-target people who already lost money to a scam — the real IC3 never asks for payment or contacts victims directly.
  • AVASC's data shows AI-run romance-investment ("pig-butchering") and fake task/job scams remain the two most severe threats by risk score this period.

World Cup ticket scams are peaking as the tournament nears its final

The FBI's Internet Crime Complaint Center has been warning since late May that cyber threat actors are spoofing FIFA's official website to sell fake tickets and hospitality packages and to harvest personal data. The FBI has identified actors engaging in this activity to collect personal information, sell fake World Cup tickets and hospitality products, and to possibly facilitate other malicious activity. With the tournament running through July 19 at MetLife Stadium, fans are still hunting for last-minute seats, and the FBI says more fake websites may appear leading up to and throughout the 2026 World Cup.

This lines up closely with what AVASC's own database is seeing this period: reports of spoofed official ticket sites and fake resale listings on social media, with payment demanded via peer-to-peer apps to a stranger for tickets that never arrive. The FBI's guidance is simple: type FIFA.com directly into your browser rather than clicking links or sponsored search results, since paid advertisements in search engines can be purchased by scammers specifically to divert traffic away from the real site.

Toll-text smishing keeps moving state to state

The nationwide wave of "unpaid toll" text messages remains active. FBI complaint data indicates the scam may be moving from state-to-state, with texts claiming a small outstanding toll and warning of a late fee, while the link is created to impersonate the state's toll service name and phone numbers change between states. AVASC's data shows this is currently our highest-volume cluster, with 520 reports referencing SMS/RCS blasts impersonating agencies like E‑ZPass, SunPass, FasTrak and TxTag, and look-alike payment pages on unofficial domain endings.

Authorities emphasize that legitimate toll agencies do not send payment requests via text, and toll violations are typically only sent via mail. If you get one of these texts, do not click the link — check your account directly on the toll agency's real website or by calling its published customer-service number, then delete the message.

Imposters posing as the FTC and FBI/IC3 — including 'recovery' re-victimization

The FTC's own homepage currently carries an active alert that scammers pretending to be FTC employees are tricking consumers into giving them money, access to financial accounts or personal information, and reminds the public that a real FTC employee won't text you their photo ID to "verify" their identity. This fits a broader pattern: new FTC data show people reported losing $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020, making it the agency's top-reported category.

AVASC is also tracking a painful secondary wave: people who already lost money to a scam being approached again by fake "recovery" services or people impersonating the FBI/IC3. The FBI has confirmed this is real and ongoing, warning that the IC3 will never directly contact you for information or money and does not work with any non-law enforcement entity, such as law firms or crypto services, to recuperate lost funds. In documented cases, scammers even posed as fellow victims in support groups before directing people to a fake "IC3 director" on Telegram who claimed funds had already been recovered — solely to extract more financial information.

Protect yourself

  • For World Cup tickets: type FIFA.com directly into your browser, skip sponsored search results, and never pay a stranger via Zelle/Venmo/Cash App for tickets.
  • For toll texts: don't click the link. Check your balance only via the toll agency's official site or published phone number, then delete the text.
  • No real government agency (FTC, FBI/IC3, SSA, IRS) will text you an ID badge, demand gift cards or crypto, or ask you to move money to "protect" it.
  • If you're a past scam victim and someone contacts you claiming they can recover your funds for a fee — especially via Telegram, social media, or an unsolicited DM — treat it as a red flag; report it directly at ic3.gov or ReportFraud.ftc.gov instead of engaging.
  • Slow down before any urgent money request tied to a stranger, a romance connection, or an 'official' notice — verify independently using contact info you look up yourself, not one provided in the message.
  • Report suspicious texts by forwarding to 7726 (SPAM) and file a complaint with IC3 or the FTC to help investigators track these campaigns.

Sources

Think you've been targeted by a scam?

Reporting takes just a few minutes. It helps us warn others, strengthens the scam database, and connects you to recovery resources.

This briefing is public-safe intelligence: it surfaces only indicators and patterns that are already public, alongside protective guidance — never a playbook for scammers. AVASC is not a law firm, investigator, or government agency, and this is not legal or financial advice. If you've been targeted, you can report a scam or explore recovery resources.