Scammers score big during World Cup

As the United States hosts a portion of the FIFA World Cup, football fans need to be vigilant when getting in on the action.  There has been a noticeable increase in scams related to this major event. The security firm Fortinet counted more than 13,000 World Cup-themed web domains registered from January to May. Approximately 9% of these domains were flagged as malicious or suspicious. With an increase in scams, cyber professionals are encouraging all World Cup attendees to slow down before making any major purchases.

Tips for consumers to protect their information:

• Purchase tickets through verified sellers only. FIFA tickets only move through FIFA’s official website.
• Be careful when using “free streams” to watch the games. Many of the links to these free streams have hidden malware. This may result in stolen card information or other personal information.
• Do not scan random QR codes or trust random links. If you need additional information about purchasing tickets, event details, or other information related to the World Cup, go directly to FIFA’s website: fifa.com.
• Verify the price of tickets, merchandise, and other items to confirm if the deal is too good to be true.
• Pay for online purchases with a credit card to maintain Fair Credit Billing Act protection.
• Triple-check all website addresses before entering any payment or personal information.

These tips for individuals can also be applied to all online purchases, including shopping, concert tickets, and resale sites. Individual consumers should be vigilant when making any payment virtually.

Businesses can also be impacted by these types of scams. Scammers often use company names, logos, and branding to mislead employees and customers. These scams can result in reputational harm to a company. It is important for businesses to remind employees to exercise caution and refrain from making personal purchases on work devices or networks, accessing fraudulent or suspicious websites, or clicking on unknown links. Further, educating employees and offering training on phishing emails, general cyber hygiene tips, and overall internet safety can help reduce exposure to these types of security incidents.

As privacy attorneys, we help businesses navigate threats from consumer data exposure to compliance obligations. If you have any questions about how scams like these can impact your organization or if you need guidance on strengthening your privacy and security, our team is available to assist.

For more guidance on fraud protection and cybersecurity, please contact McDonald Hopkins' Data Privacy and Cybersecurity Practice Group's Blair Dawson and Hannah Jones.