New research from Check Point Research, the threat intelligence arm of Check Point Software Technologies, reveals a coordinated campaign to establish thousands of fake domains, botnets, and phishing tools, all masquerading as legitimate FIFA and host city assets. The early play: Fraud infrastructure in motionSince 1 August 2025, Check Point has identified more than 4,300 newly registered domains spoofing FIFA, “World Cup,” or tournament host cities like Dallas, Miami, Toronto, and Mexico City. Its infrastructure is being built, at scale, to exploit global interest before the World Cup even kicks off,” said Amit Weigman, evangelist at Check Point Software Technologies. They are matching their timeline to FIFA’s.”What Check Point Research found4,300+ FIFA-related domains registered in less than 60 days, with peak activity between 8-12 August and again in early September. Ticketing disruptionBeyond simple scams, Check Point uncovered evidence of systemic attacks designed to destabilise FIFA’s ticketing infrastructure.