Fake FIFA or cricket match ticket site steals your card — and a fake APK steals your phone
Fake websites mimicking official FIFA 2026 / IPL / cricket ticketing portals use real-time card skimming and OTP interception to steal payment credentials. Fake 'free streaming' APKs shared on social media install malware.
Also known as: FIFA World Cup 2026 ticket scam, fake sports streaming APK, fake event ticket website India, fake IPL ticket website
Already happened to you? Do this in the next few minutes
Call 1930 now- 1 Call 1930 — the national cyber-crime helpline — right now. The sooner you report, the better the chance of freezing the money before it moves.
- 2 Call your bank to freeze the account and block the card immediately. Use the number printed on your card, never a number from the message or caller.
- 3 File a report at cybercrime.gov.in and keep every message, screenshot, and transaction ID.
- ! If you installed any "support", "server", "refund", or remote-access app at their request (AnyDesk, TeamViewer, Quick Support, etc.): disconnect the internet now, then run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
What to do right now
- 1 Buy FIFA tickets only at tickets.fifa.com — no other site is authorised to sell them
- 2 If you entered card details on a suspicious site, call your bank immediately to block your card and dispute the charge
- 3 Do not install APK files from social media or WhatsApp claiming to stream FIFA matches — use official broadcaster apps only
- 4 If you installed any 'support' or 'server' or 'refund app' or remote-access app at the scammer's request (AnyDesk, TeamViewer, Quick Support, etc.), run free SeraphSecure (https://www.seraphsecure.com) to detect and remove it.
- 5 Report at https://cybercrime.gov.in or call 1930 (national cyber helpline).
Was remote-access software installed?
If a scammer asked you to install AnyDesk, TeamViewer, Quick Support, or any remote-access app, your device may still be compromised.
Run SeraphSecure to detect and remove it →Red flags
- ⚠ More than 40 fraudulent FIFA 2026 ticket sites were identified by cybersecurity firm CloudSEK — typosquatting domains with subtle spelling differences or extra words like 'ticket', 'booking', 'official'
- ⚠ The site has a working shopping cart, realistic match schedules, and a payment gateway — but it captures your card number, expiry, CVV, and then intercepts the OTP in real time
- ⚠ Social media posts (Facebook, Instagram) promise 'free live streaming' links or APK files for matches without a legit Indian broadcast — these are malware
- ⚠ Urgent offers: 'Last 3 tickets available,' 'Flash sale ends in 10 minutes,' countdown timers designed to prevent you thinking clearly
- ⚠ FIFA 2026 tickets are ONLY sold at tickets.fifa.com — no authorised agent resells them for India
- ⚠ Any 'discounted' or 'bulk' ticket offer via WhatsApp or Telegram is a scam — there is no secondary market for FIFA tickets
Known variants
-
Confiant Red Card malvertising (July 2026): attackers use RTB ad networks to serve fake FIFA ticket ads on sports sites (ESPN Cricinfo, etc.) — no suspicious site visit required. 200+ new malicious FIFA domains per day at peak; card skimmed in 2 seconds. India is a top-3 target with no official FIFA 2026 broadcaster.
Last seen: 7/30/2026
-
Kerala Police (July 2026): fake FIFA streaming apps — HZ TV, OPEN TV, NB TV, MAX TV, XM TV, TUBI TV — spread via social-media ads. They request Accessibility Service, Screen Overlay, and Notification Access to silently hijack banking/UPI apps, intercept OTPs, and drain accounts.
Last seen: 7/30/2026
Sources
- CloudSEK / IANS — 40 fake FIFA World Cup 2026 ticket sites linked to fraud network (June 12, 2026)
- DD News — FIFA World Cup 2026: Fake ticket websites trigger surge in fraud risks for Indian fans
- The420.in — FIFA World Cup 2026 Ticket Scam Exposes Over 40 Fake Websites
- Sunday Guardian Live — FIFA World Cup 2026: Beware Indian Fans! Fake Free Streaming Apps Warning
- FBI — Warns Soccer Fans About World Cup Ticket Scams (AARP)
- The420.in / Sakshi Post — 13,000+ FIFA-themed malicious domains and 1,700 fake social media accounts targeting Indian fans (July 2026)
- Kerala Police Cybercrime / The South First — Fake FIFA streaming apps (HZ TV, OPEN TV, NB TV) request Accessibility Service to hijack banking apps (July 2026)
- Sunday Guardian Live / The Print — Kerala police: fake OTT apps named MAX TV, XM TV promoted as free FIFA streams steal UPI access (July 2026)
- Confiant — Red Card Report: FIFA World Cup 2026 malvertising campaign, 13,000+ domains, RTB-based card skimming (July 2026)