
TRM Labs identified three active crypto scams around the 2026 World Cup: two fake ticket sites and a betting scheme. Funds move from Polygon to Tron or to exchange deposit addresses. More addresses are expected as the tournament progresses.
Three crypto scams are already live around the 2026 FIFA World Cup, TRM Labs said Tuesday. The blockchain analytics firm identified two fake ticket sites and one fake betting scheme, all set up before the tournament kicked off.
TRM Labs linked the operations to multiple crypto addresses reported on Chainabuse, a community-driven scam database. The pattern shows scammers building infrastructure early, then waiting for event-driven demand to spike.
Funds move in predictable ways. In the ticketing scam, payments flow from Polygon into Tron. In the betting scam, money goes straight to a custodial exchange deposit address, likely for cash-out. TRM Labs tracked over $1.9 billion in scam funds that have moved through bridges using similar methods, though that figure covers a broader period, not just the World Cup.
The timing matters. Law enforcement agencies including the FBI and the LA County Sheriff's Department have warned that crypto scams may target fans around the tournament. TRM Labs' findings confirm those warnings are grounded in real, on-chain activity.
For exchange compliance teams and ticketing platforms, the immediate risk is that the infrastructure already exists and can scale quickly. The same addresses could process thousands of small payments from fans looking for last-minute tickets or betting odds. Cross-chain swaps and direct exchange deposits make the money harder to trace in real time.
What would reduce the risk: faster coordination between exchanges, regulators, and analytics firms like TRM Labs. Real-time monitoring of the known addresses, combined with alerts when new wallets start receiving tournament-related traffic, could limit exposure before the scams reach peak volume.
What would make it worse: a surge in demand as the tournament progresses, drawing more scammers into the same playbook. TRM Labs expects more linked addresses to surface. Early detection is the only practical defense.
The broader takeaway for anyone tracking crypto market analysis is that major live events remain a reliable vector for scam infrastructure. The enforcement push from the U.S. government, including OFAC's actions on Tornado Cash, has not stopped coordinated actors from setting up shop. They just route around the controls.
Prepared with AlphaScala research tooling and grounded in primary market data: live prices, fundamentals, SEC filings, hedge-fund holdings, and insider activity. Each story is checked against AlphaScala publishing rules before release. Educational coverage, not personalized advice.