Threat Actors Spoofing FIFA Websites in Advance of the 2026 World Cup

The Federal Bureau of Investigation (FBI) is warning the public that cyber threat actors are conducting spoofing attacks against the Fédération Internationale de Football Association (FIFA) website in advance of the 2026 FIFA World Cup.

A spoofed website is designed to pose as a legitimate website, with branding, product listings, etc., and malicious actors use them to further illegal activity like personal information theft and facilitating monetary scams.

Threat actors often create spoofed websites by slightly altering characteristics of legitimate website domains, with the purpose of gathering personally identifiable information (PII) entered by a user into the site, including name, home address, phone number, email address, and banking information.

For example, spoofed website domains may feature alternate spellings of words or use an alternative top-level domain to impersonate a legitimate website. Members of the public could unknowingly visit spoofed websites while attempting to access FIFA’s website.

When navigating to FIFA’s official website, type fifa.com directly into the address bar located at the top of your Internet browser, rather than using a search engine.

The FBI is aware of the following domains spoofing the legitimate FIFA website and anticipates additional fake domains to be created leading up to, and throughout, the 2026 World Cup. Below are examples of domains already identified; however, the public should be aware that new websites will continue to appear.

• www.fifa[.]cab
• www.fifa[.]pink
• www.fifa[.]blue
• www.fifa[.]pub
• FIFA[.]city
• Fifa[.]bio
• fifa[.]beer
• fifa[.]click
• fifa[.]cam
• fifa[.]ceo
• fifa[.]help
• filfa[.]org
• fifa-online[.]com
• https://fifa-2026[.]xyz
• jobs-fifa[.]com
• fifa-hr[.]com
• fifa-careerhub[.]com
• fifaworldcup-careers[.]com
• fifa-hiring[.]com
• fifahiring[.]com
• fifa-ticket[.]live
• fifastore.us[.]com
• fifaworldcup26[.]sale
• fifaworldcup26.xcover-staging[.]com
• worldcup2026-tickets.com[.]mx
• worldcup26ticket[.]com
• 2026fifaworldcuptickets[.]online
• fwc2026[.]net
• fwc2026.web[.]app
• www.fifa2026p[.]com
• fifa2026fworldcup[.]com
• wvvw-fifa[.]com
• ww-fifa[.]com
• fifa-com[.]com
• www.fifa-com[.]services
• quiniela-fifa-2026.pages[.]dev