With thousands of football fans preparing for the FIFA World Cup 2026, cybercriminals are increasingly targeting travellers searching for flights, accommodation and match tickets. Security researchers at Kaspersky have identified several scam campaigns designed to steal personal information, financial details and even business funds by exploiting the growing excitement around the tournament.

Kaspersky Warns of Rising World Cup 2026 Travel Scams

As anticipation builds for the FIFA World Cup 2026, cybersecurity company Kaspersky is warning travellers to be cautious when booking flights, accommodation and event-related services online.

According to Kaspersky researchers, scammers are taking advantage of the surge in travel planning by creating fake websites, fraudulent ticket offers and phishing campaigns aimed at football fans heading to the tournament.

Fake Prize Websites Target Travellers

One scheme recently uncovered by Kaspersky involved a fraudulent Spanish-language website impersonating a popular transport app in Mexico. The site promised users prizes and rewards in exchange for logging into their accounts.

Instead of receiving a reward, victims risked handing over their phone numbers, passwords and other sensitive information directly to cybercriminals.

Fake Discounts on Flights, Hotels and Match Tickets

Kaspersky’s Digital Footprint Intelligence team also identified offers circulating on dark web forums advertising discounted airline tickets, hotel bookings and World Cup match tickets.

These promotions claimed to offer savings of up to 20% but were allegedly designed to steal money from unsuspecting buyers, leaving victims without tickets, accommodation or refunds.

Property Owners and Businesses Also Being Targeted

The company says scammers are not only targeting football fans but also businesses connected to the travel industry.

Researchers discovered fake websites designed to mimic legitimate accommodation platforms, with the goal of stealing property owners’ account credentials. Access to these accounts could potentially allow fraudsters to make unauthorised withdrawals or alter booking information.

In another scheme, cybercriminals posed as representatives of major airlines and approached businesses with fake partnership opportunities. Victims were sent forged registration forms and contracts before being asked to pay a “refundable deposit” to secure a place on a preferred supplier list.

According to Kaspersky, once the payment is made, the fraudsters disappear and the promised partnership never materialises.

How Travellers Can Stay Safe

Anna Lazaricheva, Senior Spam Analyst at Kaspersky, advises travellers to approach unusually attractive offers with caution, especially those involving significant discounts or rewards.

Before making bookings, travellers should verify websites carefully, avoid clicking links in unsolicited emails and messages, and purchase tickets or accommodation only through trusted, official channels.

As World Cup excitement continues to grow, experts warn that staying vigilant online may be just as important as planning the journey itself.