World Cup Ticket Traps, Toll Texts & AI Pig-Butchering Scams

World Cup ticket scams surge as the tournament heads into its final week

With the World Cup final set for July 19, fan demand for last-minute seats is peaking — and so are the scams. In May, the FBI issued a Public Service Announcement to warn the public that cyber threat actors are conducting spoofing attacks against the Fédération Internationale de Football Association (FIFA) website in advance of the 2026 FIFA World Cup. Threat actors often create spoofed websites by slightly altering characteristics of legitimate website domains, and spoofed website domains may feature alternate spellings of words or use an alternative top-level domain to impersonate a legitimate website.

Beyond fake FIFA pages, scammers may ask for payment through a peer-to-peer app such as Zelle or Venmo, then send a counterfeit ticket or disappear after the money's been transferred. AVASC's own data shows this pattern too: our ticket-resale cluster logs fake resale listings on social media paired with peer-to-peer payment demands to strangers — a lighter-weight, faster-moving cousin of bigger investment scams, but painful for fans who lose both money and a once-in-a-lifetime trip.

Unpaid-toll text wave keeps rolling nationwide

This remains the single highest-volume scam in AVASC's database this period, and federal data backs that up. In 2025, the FTC got more than 1 million reports about imposter scams, with reported losses increasing by nearly 20% to $3.5 billion, and reports of government imposter scams were up 40%, thanks in part to messages about overdue tolls that spoof real toll collection programs like EZ-Pass, SunPass, FasTrak, and TxTag to seem more credible.

The FCC has flagged the same pattern: imposters are sending fraudulent text messages claiming to be from legitimate toll payment companies, saying the recipient has an unpaid toll or owes a balance that will be suspended if immediate payment isn't made. AVASC is seeing these texts increasingly read like polished, error-free official notices rather than the clumsy scams of a few years ago — a sign the con artists are using AI to write them.

AI is scaling pig-butchering crypto-romance scams — but so is the crackdown

AVASC rates this our highest-risk active cluster right now, and the enforcement numbers show why regulators are alarmed. The first four months of 2026 produced more enforcement action against pig-butchering than the entire preceding decade, and by April 29 Dubai Police walked out of nine fortified compounds with 275 suspects in custody, while the DOJ had already announced two other historic operations in the same quarter.

The FBI's victim-notification program shows how deep the damage runs before people realize it: the FBI has notified 8,103 victims of cryptocurrency investment fraud, 77% of whom were unaware they were being scammed, with estimated victim savings of $511,511,288 from early intervention. AVASC's data mirrors the FBI's warning that these approaches now start as an ordinary-looking friendship or romance on chat apps before pivoting to a "trading" platform — a pattern our clusters increasingly link to AI tools running many conversations at once.

Fake "fund recovery" agents — including phony FBI/IC3 staff — are re-targeting past victims

If you've already lost money to a scam, be extra cautious of anyone offering to get it back. The FBI has warned the public about an ongoing fraud scheme where criminal scammers impersonate FBI Internet Crime Complaint Center (IC3) employees, and between December 2023 and February 2025 the FBI received more than 100 reports of IC3 impersonation scams. The bureau is unambiguous on this: the IC3 will never directly communicate with individuals via phone, email, social media, phone apps, or public forums, and will not ask for payment to recover lost funds or refer a victim to a company requesting payment for recovering funds. AVASC's own support-group members report the same tactic — unsolicited outreach from strangers posing as fellow victims who then "introduce" a paid recovery contact.