The reported scam pattern is familiar: an advert leads to a fake ticket page, the conversation moves to a private messaging app, a bank transfer is requested and the supposed seller disappears.
Fans should keep every transaction within official ticketing channels and treat pressure as a reason to pause. A genuine seller should not object to careful verification, while requests for deposits, rushed payments or unusual payment methods deserve immediate suspicion.
A professional design is no guarantee of authenticity. The report says criminals are using artificial intelligence to create convincing messages, polished online storefronts and fraudulent promotions.
Chris Olson, a cybersecurity executive cited in the update, warns that deals discovered through social-media adverts or search results should be treated as suspicious until independently verified. The safest route is to type the official website address directly into the browser rather than follow a sponsored link or message.
The report also says warns that tickets bought outside approved channels may be fake, invalid or heavily inflated. Fans should check the seller, the resale process and the terms before paying.
Supporters without tickets are not outside the danger zone. Security researcher Assaf Morag warns that illegal streams can expose viewers to malicious adverts, fake software updates, stolen payment details and redirects to other fraudulent websites.
The promise of a free match can therefore become an expensive security problem. Official broadcasters and trusted services remain the safer option, even when a stream appears only minutes before kick-off.
As the tournament’s most sought-after matches approach, scammers are likely to lean harder on scarcity and excitement. The key test for fans will be simple: if an offer demands an instant decision, walk away and verify it through an official channel.