World Cup Final Ticket Scams Surge as Task-Job and Toll Frauds Persist

Breaking: World Cup Final Ticket Scams Hit New Victim Days Before Kickoff

With the 2026 FIFA World Cup final set for Sunday in New Jersey, fraud is spiking around last-minute ticket hunting. A report published just yesterday describes an Indianapolis fan who lost $22,000 after connecting with a scammer through a friend and being sold fake tickets. Investigators say the case lands amid a broader wave the FBI has been tracking since May, when its Internet Crime Complaint Center (IC3) first warned that cyber threat actors are conducting spoofing attacks against the FIFA website in advance of the 2026 FIFA World Cup, using sites designed to pose as legitimate with branding and product listings to further illegal activity like personal information theft and facilitating monetary scams.

The FBI has since named specific typosquatted domains and identified a technique called typosquatting, where fraudulent domains mimic FIFA's real URL using minor misspellings or alternative suffixes, with examples including fiffa[.]com, worldcup26ticket[.]com, fifa-ticket[.]live, and 2026fifaworldcuptickets[.]online. Separately, security researchers flagged one operator, dubbed by Group-IB, that is running a sophisticated phishing campaign across more than 300 domains, having built an exact replica of the official FIFA website down to the pixel, including a fake single sign-on flow. This directly echoes AVASC's own "Event & Sports Ticket Resale Scams" cluster, where our data shows fraudsters spoofing official ticket sites and pushing peer-to-peer payment demands — the exact pattern now playing out at national scale.

What We're Seeing: Toll Texts and Task-Job Scams Still Running Hot

AVASC's database logged 520 reports this period on unpaid-toll smishing — our single highest-volume cluster — and federal regulators confirm the pattern is nationwide and ongoing. The FTC's active consumer alert states plainly: whether you've driven through a toll recently or not, you might've gotten a text saying you owe money for unpaid tolls, and it's probably a scam, with scammers pretending to be tolling agencies from coast to coast. The FCC has separately confirmed the scam texts say the recipient has an unpaid toll or owes a balance that will be suspended if immediate payment isn't made, with the sender's number often spoofed to look like it's from a toll company.

AVASC is also seeing a steady 210 reports on task-based 'job' scams, and the FTC just issued a fresh warning on a related variant this spring. Instead of a payment link, recruiters ask targets to reply with 'YES' or 'INTERESTED' no matter how professional the message looks, because they want engagement so they can scam you. The core mechanics match what AVASC is logging: in a task scam, scammers ask victims to do simple, repetitive tasks like liking videos or rating product images for a supposed commission on each click, with an ever-increasing tally of fake earnings shown in the app — until, per the FTC, the app asks victims to deposit their own money, usually in crypto, to unlock earnings that are gone for good once sent.

Watch Out: Scammers Are Impersonating the FBI's Own Fraud-Reporting Line

AVASC's "Fund Recovery" cluster — people already scammed once being targeted again — lines up with an active FBI warning that criminals are impersonating IC3 itself. The Bureau's advisory is direct: the FBI warns the public about an ongoing fraud scheme where criminal scammers are impersonating FBI IC3 employees, and between December 2023 and February 2025 the FBI received more than 100 reports of this exact tactic. Nearly all cases follow the same script: almost all complainants indicated scammers claimed to have recovered the victim's lost funds or offered to help recover them, but the claim is a ruse to revictimize those who've already lost money. The real IC3 has been explicit about its own limits: IC3 will never directly communicate with individuals via phone, email, social media, phone apps, or public forums, and will not ask for payment to recover lost funds, nor refer a victim to a company requesting payment for recovery.