Scammers Kick Off World Cup Early: Three Crypto Plays Already Running Before Halftime

TRM Labs has linked four cryptocurrency addresses to live scam operations targeting 2026 FIFA World Cup fans, identifying two fake ticketing sites and a fixed-match betting scheme deployed ahead of the tournament's Thursday kickoff across Canada, Mexico, and the United States. The blockchain intelligence firm said the combined wallets have received less than $1,700 so far, but warned that scam volume and frequency typically scale once public attention peaks.

"Criminals always look to exploit major events and cultural moments and they don't wait until kickoff," Ari Redbord, global head of policy at TRM Labs, told Cointelegraph. "Scammers build and position their infrastructure weeks in advance, then scale it the moment public attention peaks." Redbord added that the on-chain nature of crypto payments allows investigators and compliance teams to act before losses grow.

FIFA has projected approximately 6.5 million attendees and up to $40.9 billion in global GDP impact, creating concentrated demand for tickets, travel, and betting that scammers are actively targeting. One Polygon (POL) wallet associated with a fraudulent ticketing site pulled in about $1,562, almost all on April 1, while a second operation tied to a Bitcoin ($BTC) address keeps its phishing page live but has not yet accepted payments. A separate fixed-match scheme, linked to a $BTC wallet that collected small sums between January and May 2026, has routed funds into a custodial exchange deposit address. TRM also flagged the $WORLDCUP token trading on LBank, described as a fan-made commemorative project with no FIFA affiliation, as a third exposure vector carrying typical low-liquidity risks.

Watchdogs had already sounded the alarm. In May, the Federal Bureau of Investigation warned that threat actors were spoofing FIFA websites to collect personal information, sell fake tickets, and carry out other malicious activity. FIFA has separately cautioned that tickets purchased outside its official website may be deemed invalid and cancelled without notice, while the Council on Foreign Relations reported that several opening matches in the US and Canada were not sold out on FIFA's platform as of Monday. The Financial Times reported Tuesday that official resale portals still listed 176,000 unsold tickets across group-stage matches.

TRM's analysis traced post-payment fund movement across chains, with ticketing-scam proceeds flowing from Polygon into Tron and betting-scam payments heading directly to a custodial exchange deposit address for potential cash-out. The firm counted roughly $1.9 billion in scam funds moved through bridges over time, underscoring how cross-chain swaps and exchange deposits remain common tools for obfuscation. As the tournament progresses, more addresses linked to the identified operations are likely to surface, and compliance teams are monitoring known reports from Chainabuse alongside TRM's database to flag suspicious flows in real time.