India, June 11 -- The first whistle is still ahead, but FIFA World Cup 2026 scams are already moving at match speed. Fortinet's FortiGuard Labs says more than 13,000 FIFA World Cup 2026 themed domains were registered between January and May 2026, with about 8.8% classified as malicious or suspicious.

The security message is clear. Cybercriminals are building the attack surface before fans flood the internet for tickets, streams, jobs, travel, merchandise, and betting apps.

The report shows how attackers are using FIFA branding, tournament keywords, ticketing phrases, streaming terms, betting hooks, and hospitality language to pull users toward fake websites. Domain registrations also rose sharply from March to May 2026, which points to ...