World Cup Scams Flying Under the Radar
World Cup 2026 has spawned a wave of suspicious ticket and travel sites complete with bought followers, forged FIFA credentials, and forms that harvest personal data with no real booking behind them.

World Cup FOMO and sky-high ticket costs have bred a thriving ecosystem for resellers, bargain hunters, and the scammers who feed on both. One quick online search, or clicking an ad on a trusted social media platform, can send a fan to a polished “official” site (likely vibe-coded within minutes). These “suppliers” claim to offer help securing World Cup 2026 tickets or travel, luring buyers to click now and question later.
The examples we present below show the hallmarks of scams encouraging World Cup fans – a pool of billions of potential victims – to suspend skepticism, make contact, and divulge personal information. Slick design, social media engagement, paid ads, and inflated follower counts create a veneer of authenticity. Understanding their strategy is key to mitigation and brand protection.
Fraudulent World Cup Vendor, Fake Facebook Ads
Created on June 8, the GoCup 2026 Facebook page features a FIFA World Cup Trophy logo and already has 1.6k followers. Its administrator is running ads on Facebook for a “Premium World Cup 2026 travel platform” that leads to GoCupGlobal[.]com – a site also registered in June.

The Facebook page’s only visible followers are two accounts with profile images of couples; one published a post that shows up in GoCup 2026’s page’s mention tab: “Well, that was easy. I got my ticket and accomoodation [sic] sorted out.” There’s also a Go Cup 2026 Instagram account with over 8k followers, but they’re accounts that follow over 3k and have fewer than 50 followers of their own: a sign that the followers were purchased and not real Instagram users.
GoCupGlobal[.]com’s landing page reads, “Your Passport to World Cup 2026” and features a “Trusted Platform” badge icon and a timed-out ticker that presumably counted down the days to the World Cup kick-off. Key metadata terms, such as “World Cup 2026, FIFA World Cup 2026, World Cup travel packages, World Cup tickets,” are littered throughout for search-engine optimization.
Although claiming to help with tickets, hospitality, visa guidance, and travel support across the U.S., Mexico, and Canada, a disclaimer in the site’s footer notes, “GoCup 2026 is an independent travel and fan services inquiry platform. We are not affiliated with, endorsed by, or officially connected to FIFA or the FIFA World Cup.”
Every link or call-to-action on the site, from “Get Started” to “Request a Package,” routes visitors to the same contact form requesting personal information, including email address, WhatsApp number, and nationality. The site also provides its own WhatsApp number, but there’s no actual booking function and many links in the footer and blog are dead ends. A fan who fills out the form is handing over their personal information to an unverified operator, leaving them vulnerable to direct contact on private channels and payment for a service with no guarantee of delivery
Fabricated FIFA Credentials and a Repurposed Facebook Page
The website WC26 Travels (WC26Travels[.]com) claims "We Handle Your Visa" and "You handle the excitement" with scrolling banners conveying urgency: "Last-Minute Sales Phase Now Open." A nearly identical site, GoalPass Travel (goalpasstravel[.]com), runs the same operation under a different brand.

Both offer to help with travel, visa processing, and tickets, prompting visitors to make contact via WhatsApp after submitting a contact form. According to the site’s FAQs, after “booking,” the buyer will need to supply a valid passport, photographs, financial statements, employment letter, and travel itinerary.
To signal trustworthiness, both sites display “Official Agent Reference” numbers to suggest they’re official FIFA travel partners – and they link to a site listing them as such, which replicates the legitimate FIFA hospitality sales agent directory. And searching for either site on Google generates a Gemini AI overview listing them as legitimate FIFA travel partners. (See our insight describing the technical breakdown of this network, including the cloned hospitality directory, operational overlap, and AI search results.)

Although WC26Travels[.]com was registered just three months ago, a Facebook page associated with it was created in 2019. That page runs paid Meta ads directing fans to the site. Facebook transparency details reveal the page was called "Abu Ba Kar" until recently, and its sole administrator is in Nigeria.
Why World Cup Scams Are Hard to Catch
These examples show two different approaches to the same challenge: How to make something new look established (and trustworthy). For organizations trying to protect their customers, brand, or platform, spotting evidence of this simulation is its own challenge; one shady social media account is a start – but it’s never the whole story. At Graphika, we look for the connective tissue: signals that an apparent one-off is actually a coordinated operation.
Just one WhatsApp number or email address can be a thread connecting to other campaigns, reused infrastructure, and clusters of accounts with the same operator. With such signals on our radar, we track the network’s shape and momentum, helping organizations intervene before damage spreads.
As the tournament rolls on, so will the schemes. Expect new, faster variations and rapid adaptation. If you’re responsible for marketing, or protecting consumers, a brand, or platform integrity, understanding how an operation is connected, how it's evolving, and how quickly it's scaling is just as important as detecting it in the first place.
The challenge isn’t simply identifying another fraudulent account or phishing campaign – it’s understanding whether you’re looking at an isolated incident or the leading edge of a much larger operation. That requires visibility into relationships, communities, and infrastructure connecting seemingly independent signals.
Built on Graphika’s AI World Model, our platform reveals the networks behind coordinated activity, helping organizations understand who is driving it, how it’s evolving, and where it’s likely to spread next. The result is faster, more confident decisions in moments that matter.

Graphika is the most trusted provider of actionable open-source intelligence to help organizations stay ahead of emerging online events and make decisions on how to navigate them. Led by prominent innovators and technologists in the field of online discourse analysis, Graphika supports global enterprises and public sector customers across trust & safety, cyber threat intelligence, and strategic communications, spanning industries including intelligence, technology, media and entertainment, and global banking.
More from Graphika

Emerging Playbooks: How Scammers Leverage Vibe Coding for Fraudulent Ticket Sites
After years of anticipation, the 2026 FIFA World Cup has kicked off. The ticket scam game has been seen before. What’s new is the sophistication of the storefronts, made possible by AI vibe coding software.
Read More
Holiday Scams: New Graphika Report Featured by Axios
It’s the most wonderful time of the year - for holiday hoaxes.
Read More
Infographic: Holiday Scams & Frauds Unwrapped
Check out the highlights from the latest intelligence report from Graphika
Read MoreSee How Graphika Can Help Your Team Act on This Intelligence
This post is one of 600+ investigations Graphika’s team has published. Our platform gives your analysts continuous access to the same intelligence — plus the tools to apply it to your specific threat environment.