World Cup Final Weekend Scams, Crypto Couriers & Recovery Fraud Surge

Breaking: World Cup final-weekend ticket scams are peaking

With the 2026 FIFA World Cup final in New Jersey this Sunday, ticket fraud is at its most intense point of the tournament. The FBI's Internet Crime Complaint Center issued a public alert warning that cyber threat actors are conducting spoofing attacks against the FIFA website in advance of the 2026 FIFA World Cup, using spoofed sites to further illegal activity like personal information theft and monetary scams. Investigators have already tied dozens of fake domains to the scheme, and the FBI expects additional fraudulent domains to emerge as the 2026 World Cup approaches, urging fans to verify website addresses before entering personal or financial information.

This is not theoretical: an Indianapolis fan lost $22,000 after paying a scammer over several months via Zelle for tickets that never arrived, and his bank refused a refund because the payments were made willingly. Officials say the FBI is warning about spoofed websites using typosquatting, where fraudulent domains mimic FIFA's real URL with minor misspellings or alternative suffixes such as fiffa[.]com and worldcup26ticket[.]com.

Pig-butchering crypto scams: now with in-person cash couriers

AVASC's database currently rates pig-butchering romance-investment scams as our top threat this period (340 reports, threat score 95), and federal reporting confirms the criminals are escalating tactics. The FBI recently warned that criminals are using couriers to collect money from victims of pig butchering or romance baiting scams, which usually start with fraudsters building trust via social media, dating sites, or messaging apps before luring victims into fake investment schemes, then stealing the money once it's moved into accounts they control. When banks flag the transfer, scammers push targets toward in-person cash pickups, sometimes claiming a victim's account has been "flagged," with couriers identifying themselves using a pre-arranged password or a specific dollar bill serial number.

This lines up directly with what AVASC is seeing: a rise in "invited" look-alike exchange apps and Telegram/WhatsApp grooming chats that keep victims trapped behind fake fees. Nationally, the scale is enormous — investment scams accounted for over $8.6 billion in losses last year, double the prior year, with cryptocurrency fraud making up 72% of all investment scam losses.

New twist: fraud victims are being targeted again by fake "recovery" services

AVASC has logged a growing cluster of fake fund-recovery outreach aimed at people who already reported a scam to us — and this matches a fresh nationwide warning. The FTC recently cautioned that scammers are keeping "sucker lists" to repeatedly target previous fraud victims with fake recovery offers and upfront fees. These lists let criminals sound convincing: a caller who knows exactly what you lost and how much may sound official, when in reality that information may have been bought from a list and repeated back to gain your trust. The FBI has separately confirmed that criminals were impersonating the FBI's Internet Crime Complaint Center (IC3) in recovery scams, with fake FBI agents contacting victims by phone or email to say IC3 has recovered their stolen funds. The agency is blunt about its own conduct: the FBI will never ask for money, move communications to private messaging apps, or request bank account details or personal identifying information.