In recent months, Spain has faced a significant increase in fraudulent schemes involving the sale of tickets for major sporting and cultural events. The problem has become especially acute in the run-up to the 2026 FIFA World Cup, as thousands of fans try to purchase coveted tickets online.
Cybersecurity experts report that criminals are actively setting up fake websites that are visually indistinguishable from the official FIFA and host city portals. In just the last few weeks, more than 4,300 such sites have been identified, created to sell counterfeit tickets and distribute malicious software.
Analysts point out that spikes in domain registrations coincide with official FIFA announcements. This indicates the use of automated tools and specialized fraud kits. Messaging apps and darknet forums are already offering so-called “privileged” tickets, which in reality turn out to be fake.
In addition, there have been reports of botnets being used to attack online ticketing systems. These programs artificially boost demand, buy up large quantities of tickets, and contribute to rising prices. Fraud schemes are becoming increasingly sophisticated: they are adapting to different languages and regions and scaling based on the tournament stage.
Experts recommend limiting ticket purchases to official channels and strengthening digital security. Suggested measures include constant monitoring of suspicious domains, implementing additional identity checks, and using two-factor authentication. It is also important to avoid clicking on questionable links and to regularly update security software on devices.
Organizers and football clubs are introducing technical restrictions on ticket purchases through their websites. Such measures comply with existing data protection and competition regulations. Given the high risk of fraud, additional checks are justified to prevent mass purchases of tickets from a single IP address or automated attacks.
Fraudsters carefully plan their actions in sync with the official sales calendar. They exploit periods of high demand to launch phishing campaigns and create fake websites and portals. Their main goal is to create a sense of urgency among fans and take advantage of their lack of awareness in a highly competitive ticket market.
Recent years have seen a significant leap in fraud methods. Botnets not only overload virtual queues but also buy up the most in-demand tickets, impacting price dynamics. At the same time, false offers of VIP access to broadcasts are spreading, which are used to steal banking data or install malware.
