4 Crypto Scam Variants Targeting World Cup Fans—Police Warn of Deepfakes & Malware

Ahead of the 2026 FIFA World Cup, scammers are exploiting global excitement by launching a wave of cryptocurrency-based fraud targeting fans seeking tickets, merchandise, and online streaming. On July 1, 2026, the Singapore Police Force issued a public advisory highlighting multiple sophisticated scam variants that leverage the tournament's appeal. The warning underscores how fraudsters are increasingly combining social engineering, deepfake technology, and technical exploits to steal from unwary victims. One of the most common schemes involves fake ticketing websites that promise 'exclusive' World Cup tickets or official merchandise but only accept payment in cryptocurrencies such as Bitcoin or USDT. Once payment is made, the goods never materialize, and the sites are quickly taken down, leaving victims with no recourse due to the pseudonymous and irreversible nature of blockchain transactions. The police also flagged a parallel investment scam built around fictitious 'official World Cup tokens' or fan coins. Fraudsters artificially inflate the value of these tokens to entice buyers, then execute a classic pump-and-dump by selling off their holdings, crashing the price and leaving investors with worthless assets. These fake tokens are often marketed using deepfake videos featuring well-known athletes or celebrities, adding a veneer of legitimacy that can deceive even cautious individuals. Another vector described in the advisory is phishing sites that appear when users search for free World Cup live streams. Victims are prompted to connect their cryptocurrency wallets or make payments, unknowingly granting attackers access to drain their funds. Some of these pages also deliver malware that silently monitors victim activity and intercepts wallet credentials. In a more targeted version, scammers pose as potential clients or business associates on messaging platforms like Telegram. After gaining trust, they propose a video call and send a link that, when opened, triggers a fake pop-up warning about an expired software component. If the victim follows the instructions to 'update,' they inadvertently install malware granting the attacker full access to approve unauthorized cryptocurrency transactions. The malware operates covertly, often without immediate detection, allowing continued theft over time. The convergence of these techniques marks a dangerous evolution in crypto-enabled crime. By piggybacking on a high-profile global event, scammers reach a vast pool of potential victims who may be less skeptical in their pursuit of tickets or content. The use of deepfakes lowers the barrier of suspicion, while technical tools like wallet drainers and keyloggers make the theft efficient and scalable. For cyber defenders and regulators, the advisory is a call to enhance public awareness and cross-border cooperation. Crypto exchanges and wallet providers may also face pressure to implement stronger warning systems or transaction monitoring for links associated with such campaigns. Looking forward, with the World Cup set to begin in a few weeks, the volume and variety of these scams are almost certain to increase. Law enforcement agencies across the region may issue similar alerts. Ultimately, the overarching lesson remains: users must verify the authenticity of any World Cup-related site or token that requests cryptocurrency payment, avoid connecting wallets to untrusted platforms, and be skeptical of unsolicited links promising exclusive access.