Skip to main content
AVOID.NET
← FIFA World Cup 2026 Crypto Streaming Scam Networkreviewed 2026-10-27 · 14 claims checked

Fact-check findings

What an automated fact-checker found when it re-read FIFA World Cup 2026 Crypto Streaming Scam Network against the sources the page cites. Only the most recent review is shown.

Read this first

These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.

“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.

Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.

disputed 2unverifiable 3link rot 1partially supported 4confirmed 43 corrections pending · 0 applied

disputed

2 claims

The reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.

  1. #1[disputed][awaiting moderator]in section: Social Media Impersonation and Fake Employment/Job Portals
    “The FBI documented over 40 fraudulent domains in the PSA, including fifa.city,”
    reviewerThe FBI PSA documented over 40 fraudulent domainsFetched PSA lists 36 domains. The page's figure is overstated.
    Proposed correction (not yet applied)
    The FBI documented 36 fraudulent domains in the PSA, including fifa.city,
    citedwww.ic3.gov/PSA/2026/PSA260527
  2. #2[disputed][awaiting moderator]in the timeline
    “FBI/IC3 issues Public Service Announcement I-052726-PSA warning of spoofed FIFA websites, documenting over 40 fraudulent domains and advising consumers to report incidents to ic3.gov.”
    reviewerTimeline: PSA documented over 40 fraudulent domainsSame domain-count error as in the section.
    Proposed correction (not yet applied)
    FBI/IC3 issues Public Service Announcement I-052726-PSA warning of spoofed FIFA websites, documenting 36 fraudulent domains and advising consumers to report incidents to ic3.gov.
    citedwww.ic3.gov/PSA/2026/PSA260527

unverifiable

3 claims

No source the reviewer could reach confirms or contradicts the claim.

  1. #5[unverifiable][awaiting moderator]in section: Law Enforcement and Industry Warnings
    “A notable domain fifa[.]city has been active since approximately 2019 and was incorporated into the current campaign.”
    reviewerfifa[.]city has been active since approximately 2019The 2019 date was not found in the Group-IB article, which the timeline entry credits. The CybelAngel page was not checked for it.
    citedwww.group-ib.com/blog/ghost-stadium-football-fraud/
  2. #6[unverifiable][awaiting moderator]in section: Law Enforcement and Industry Warnings
    “GHOST STADIUM infrastructure is hosted across 14 identified IP addresses.”
    reviewerGHOST STADIUM infrastructure is hosted across 14 identified IP addressesPossibly confused with the 14 employment IOCs. The Group-IB article was not checked for this figure.
    citedcybelangel.com/blog/our-investigation-of…d-threat-report/
  3. #13[unverifiable][awaiting moderator]in the timeline
    “WCUP token launches on LBank; Bubblemaps alleges 95% of supply was sniped at launch by more than 30 coordinated wallets funded from an exchange 30 minutes prior; market cap reaches approximately $50 million against only $536,000 in liquidity.”
    reviewerTimeline: WCUP launches on LBank on June 10The cited source is dead. Search snippets support the 95% and 30-wallet allegations, but I found no confirmation that WCUP was listed on LBank at launch.
    citedbitcoinworld.co.in/world-cup-token-wcup-scam-bubblemaps/

partially supported

4 claims

The cited evidence supports part of the claim but not all of it.

  1. #3[partially supported][awaiting moderator]in section: Social Media Impersonation and Fake Employment/Job Portals
    “The FBI confirmed it collects cryptocurrency addresses associated with complaints for investigative purposes.”
    reviewerThe FBI confirmed it collects cryptocurrency addresses associated with complaintsOverstated relative to the PSA wording.
    citedwww.ic3.gov/PSA/2026/PSA260527
  2. #4[partially supported][awaiting moderator]in section: GHOST STADIUM Threat Actor and Phishing Kit
    “first observed in November 2025”
    reviewerGroup-IB first observed GHOST STADIUM in November 2025November 2025 comes from CybelAngel, not Group-IB as the page and timeline attribute it.
    citedwww.group-ib.com/blog/ghost-stadium-football-fraud/
  3. #7[partially supported][awaiting moderator]in the timeline
    “GHOST STADIUM domain registrations surge: 78 new domains registered in March 2026 alone, according to CybelAngel.”
    reviewerTimeline: 78 new GHOST STADIUM domains in March 2026The attribution to GHOST STADIUM is stronger than the source wording. The 30-domain event on April 29 has the same issue.
    citedcybelangel.com/blog/our-investigation-of…d-threat-report/
  4. #14[partially supported][awaiting moderator]in section: Social Media Impersonation and Fake Employment/Job Portals
    “No arrests or indictments had been publicly announced as of June 23, 2026.”
    reviewerNo arrests or indictments announced as of June 23, 2026Not contradicted, but the page has not been updated since June.

confirmed

4 claims

The cited evidence supports the claim as written.

  1. #8[confirmed][no action needed]in section: Android Banking Malware and Seed-Phrase Theft in Fake Streaming Apps
    “with nearly all funds arriving in a single day on April 1, 2026”
    reviewerTRM: Polygon address received about $1,562 on April 1TRM figures confirmed. The timeline wording 'in a single day' is slightly looser than 'almost all of it'.
    citedwww.trmlabs.com/resources/blog/tracking-…e-2026-world-cup
  2. #9[confirmed][no action needed]in section: Android Banking Malware and Seed-Phrase Theft in Fake Streaming Apps
    “converting card payments of approximately $195 into roughly 185 USDT settled on Binance Smart Chain”
    reviewerThe GHOST STADIUM operation accepts crypto via Alchemy Pay, about $195 to 185 USDT on BSCSupported by Group-IB, not by TRM, which is the first source listed in that section.
    citedwww.group-ib.com/blog/ghost-stadium-football-fraud/
  3. #10[confirmed][no action needed]in section: GHOST STADIUM Threat Actor and Phishing Kit
    “Group-IB documented 2,513 FIFA credential pairs circulating on dark-web markets priced at $5 to $50 per pair.”
    reviewerGroup-IB: 2,513 credential pairs at $5-$50, 47,400+ victims, $71M-$474M, 300+ domains, Layui 2.7.6, Pixel IDs, Tawk.to ID on 79 domains, $60 tickets, April 27 redirectors, published May 27Core Group-IB figures check out.
    citedwww.group-ib.com/blog/ghost-stadium-football-fraud/
  4. #11[confirmed][no action needed]in section: Law Enforcement and Industry Warnings
    “CybelAngel catalogued 468 total indicators of compromise across four active fraud vectors as of their June 15, 2026 report.”
    reviewerCybelAngel: 468 IOCs split 355/87/14/12, 344 clone domains, 125 live, 146 on Cloudflare, published June 15Confirmed.
    citedcybelangel.com/blog/our-investigation-of…d-threat-report/
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.