Mexico warns of World Cup 2026 ticket scams as cybercriminals target fans

Buy only through official channels—everything else is a trap
Mexican authorities warn fans to verify FIFA's official ticketing portal and ignore fraudulent websites replicating legitimate agencies.

En los meses previos a la Copa del Mundo 2026, el entusiasmo colectivo por vivir el torneo se ha convertido en terreno fértil para el engaño digital. Las autoridades mexicanas advierten que ciberdelincuentes han desplegado una red de sitios clonados, perfiles falsos y contratos de apariencia legal para defraudar a quienes buscan boletos y paquetes de viaje. Como ocurre en tantos momentos de celebración masiva, la ilusión compartida abre también la puerta a quienes explotan la confianza y la urgencia. La única defensa confiable, señalan las autoridades, es la verificación paciente y el escepticismo ante lo que parece demasiado conveniente.

  • Ciberdelincuentes han construido una infraestructura de fraude sofisticada —sitios web clonados, perfiles falsos en redes sociales y contratos de apariencia legal— que imita con precisión los canales oficiales de venta de boletos y paquetes turísticos.
  • La presión es una herramienta central del engaño: los estafadores crean urgencia artificial, advierten que los lugares se agotan y exigen pagos inmediatos mediante transferencias a cuentas personales o criptomonedas, métodos casi imposibles de rastrear.
  • Las víctimas no solo pierden dinero; también entregan datos bancarios, contraseñas y códigos de verificación, exponiendo su seguridad financiera mucho más allá de la transacción inicial.
  • Las unidades de cibercrimen federal y la policía cibernética de la Ciudad de México han activado canales de denuncia —incluyendo la app Mi Policía, correo electrónico y una línea telefónica especializada— para documentar y combatir estos esquemas.
  • Las autoridades advierten que la sofisticación de las estafas crecerá conforme se acerque el torneo, haciendo de la verificación en portales oficiales de FIFA y del escepticismo ante precios inusualmente bajos las únicas defensas verdaderamente confiables.

Las autoridades de seguridad federales y de la Ciudad de México han encendido las alarmas ante una oleada de fraudes digitales dirigidos a aficionados que buscan boletos y paquetes de viaje para la Copa del Mundo 2026. Los esquemas son elaborados: ciberdelincuentes construyen sitios web que replican con fidelidad los portales oficiales y las agencias de viaje legítimas, copiando logotipos, diseños y textos para crear una apariencia de autenticidad difícil de detectar a simple vista.

Desde perfiles falsos en redes sociales, los estafadores se presentan como asesores de viaje o representantes de agencias internacionales. Envían cotizaciones detalladas, contratos de aspecto legal y números de confirmación de reserva que no corresponden a ninguna transacción real. Una vez que capturan la atención de la víctima, aplican presión: aseguran que los lugares se agotan rápidamente y que los beneficios exclusivos solo están disponibles con pago inmediato, exigiendo transferencias a cuentas personales o pagos en criptomonedas —métodos que hacen casi imposible recuperar el dinero.

Las autoridades son directas en sus recomendaciones: adquirir boletos y paquetes únicamente a través del portal oficial de FIFA, verificar que cualquier sitio web tenga un certificado de seguridad legítimo, desconfiar de precios inusualmente bajos y nunca compartir datos bancarios, contraseñas ni códigos de verificación. Quienes detecten sitios sospechosos o reciban ofertas fraudulentas pueden reportarlos a la policía cibernética de la Ciudad de México a través de la app Mi Policía, redes sociales oficiales, correo electrónico o una línea telefónica especializada. Con el torneo acercándose y la emoción en aumento, las autoridades anticipan que estos esquemas se volverán aún más sofisticados, convirtiendo la verificación y el escepticismo en los recursos más valiosos para cualquier aficionado.

Mexico's federal and city security agencies are sounding an alarm about a surge in digital fraud schemes targeting fans eager to attend the 2026 World Cup. The scams are sophisticated and widespread—appearing in search results, social media feeds, and messaging apps—and they're designed to steal both money and personal information from people trying to buy tickets and travel packages for the tournament.

The operation works like this: cybercriminals set up cloned websites that look nearly identical to legitimate travel agencies or official World Cup portals. They copy logos, layouts, and text from the real thing, creating a veneer of authenticity that fools casual visitors. Alongside these fake sites, fraudsters operate bogus social media profiles posing as travel advisors or representatives of international agencies. From these accounts, they send potential victims detailed-looking quotations, contracts that appear legally binding, and fake reservation confirmation numbers.

Once they have someone's attention, the pressure begins. The scammers claim that spots are filling up fast or that exclusive benefits are available only if payment happens immediately. They ask for money to be transferred to personal bank accounts or paid in cryptocurrency—methods that make the money nearly impossible to trace or recover. The packages they're hawking promise the full experience: tickets to matches, hotel accommodations, and transportation, all bundled together at prices that often seem too good to be true. That's because they are.

The Mexican federal cybercrime unit and Mexico City's cyber police have been tracking these schemes and are now warning the public. Their message is straightforward: buy tickets and packages only through official channels, particularly the FIFA ticketing portal. Before entering payment information on any website, verify that the domain is authentic and that the site has a legitimate security certificate. Be suspicious of prices that seem unusually low or of any seller who insists on immediate payment. Never transfer money to personal accounts, never pay in cash or cryptocurrency for these services, and never share banking details, passwords, or verification codes with anyone claiming to represent a travel company or ticketing service.

If someone encounters a suspicious website, receives a fraudulent offer, or notices unauthorized charges on their account, authorities want to know. In Mexico City, the cyber police operate a dedicated reporting system through the Mi Policía app, official social media channels, email, and a specialized phone line. The goal is straightforward: protect both the personal data and the money of the millions of people planning to travel to Mexico, the United States, or Canada for the tournament in 2026. As the World Cup draws closer and excitement builds, so too will the sophistication of these schemes—making official channels and healthy skepticism the only reliable defenses.

Authorities recommend acquiring tickets and packages only through official FIFA channels and verifying websites have authentic domains and security certificates
— Mexican federal and Mexico City security agencies
Citizens should distrust offers with suspiciously low prices, avoid personal account transfers, and never pay in cash or cryptocurrency
— Mexico City Cyber Police and federal cybercrime unit
A Conversa do Hearth Outra perspectiva sobre a história
Inventor

Why are scammers targeting World Cup fans specifically right now, three years before the tournament?

Model

Because the emotional pull is enormous. People are already dreaming about attending, already thinking about saving money and planning trips. That makes them less careful. They're not in a defensive mindset—they're in a planning mindset.

Inventor

But why the cryptocurrency angle? Why not just ask for credit cards?

Model

Cryptocurrency is a dead end for victims. Once the money moves, it's gone. Credit cards have fraud protections, chargebacks, paper trails. Crypto doesn't. It's the perfect tool for someone who wants to disappear.

Inventor

The fake profiles posing as travel agents—how convincing are these actually?

Model

Convincing enough. They have photos, they have testimonials from other "satisfied customers," they have contracts that look official. Most people aren't trained to spot the subtle differences. And if you're excited about the World Cup, you're not looking for reasons to doubt.

Inventor

What's the actual loss here? Are we talking thousands per victim or millions overall?

Model

Both. Individual victims might lose anywhere from a few hundred to several thousand dollars. But multiply that across thousands of people, and you're looking at a significant criminal enterprise. The real damage is the erosion of trust—people become afraid to buy anything online.

Inventor

Why are authorities warning now instead of waiting until closer to 2026?

Model

Because the scams are already happening. They're not waiting. And the earlier people know what to watch for, the fewer victims there will be. It's prevention, not reaction.

Quer a matéria completa? Leia o original em El Universal ↗
Fale Conosco FAQ