The Italian Football Federation (FIGC) has issued a warning to fans as fraudulent websites mimicking its official channels are targeting supporters trying to purchase tickets for upcoming national team matches. The scam—which exploits unauthorized copies of the federation's logo and website layout—aims to steal both money and sensitive financial data from unsuspecting buyers.
Why This Matters
• Only Vivaticket is authorized: The FIGC's sole official ticket vendor is the Vivaticket portal and its affiliated physical agencies—everything else is a potential scam.
• 270,000+ credentials compromised: In recent months, over 270,000 user credentials have been exposed in football-related ticket fraud across Italy.
• No advance reservations: Tickets for upcoming Nations League matches will not require pre-booking—any site claiming otherwise is fraudulent.
The Scale of the Problem
Italy is facing a surge in digital fraud targeting sports fans. Recent research shows that 14% of Italian internet users have fallen victim to online scams related to football, entertainment, or travel. Among those deceived, 5% suffered direct financial losses. Fake ticket sales for matches rank among the most common tactics employed by criminals.
The threat has intensified ahead of the FIFA 2026 World Cup. Research shows that over 13,000 new web domains related to the tournament were registered in recent months—8.8% of which have been flagged as malicious or suspicious. Roughly 40% of fans face concrete risks when attempting to buy tickets from unofficial sources, according to cybersecurity analysts tracking the scams.
Recent investigations have revealed that 7% of Italian internet users have encountered at least one football-related scam attempt, with 47% of those incidents involving counterfeit ticket sales. The real figures are likely higher, as only about 23% of victims report fraud to law enforcement or their banks.
How the Scam Works
The fraudulent sites flagged by the FIGC use domains that closely resemble the federation's official address—such as www.figc-it.com—designed to deceive fans through subtle misspellings or domain variations. These fake platforms often feature professional-looking layouts copied directly from legitimate sources, complete with stolen branding and graphics.
Once on these sites, users are prompted to purchase tickets for high-demand matches, including the Italy vs. Belgium fixture on September 25 in Rome, Italy vs. Turkey on October 5 in Bologna, and Italy vs. France on November 12 in Milan. The scammers often create artificial urgency—claiming "last tickets available" or "limited-time offers"—to pressure buyers into making hasty decisions.
Payment methods requested by these sites are a major red flag. Fraudsters typically demand bank transfers, cryptocurrency, gift cards, or PayPal transfers marked as "friends and family." These methods offer no buyer protection and are nearly impossible to trace or reverse once completed.
What This Means for Residents
If you're planning to attend a national team match, follow these essential precautions to avoid losing money or having your personal information stolen:
Verify the URL carefully. The only authorized digital channel is vivaticket.it. Fraudulent sites often use slight variations—such as "vivatickets.com" or domains with hyphens and geographic indicators. Always check that the address begins with "https://" and displays a padlock icon, though note that encryption alone does not guarantee legitimacy.
Reject non-traceable payment requests. Legitimate vendors accept credit cards and secure payment gateways that provide buyer protection. If a site insists on wire transfers, crypto, or other untraceable methods, abandon the transaction immediately.
Watch for unrealistic pricing or availability. Tickets priced far below market value or unlimited availability for sold-out events are classic hallmarks of a scam. Similarly, be skeptical of inflated "last-minute" prices from unverified resellers.
Examine site quality and contact information. Authentic platforms display complete contact details, including phone numbers, physical addresses, and VAT numbers. Poor grammar, low-resolution images, and missing privacy policies are warning signs of fraud.
Ignore social media offers and unsolicited messages. Criminals frequently use Facebook, Instagram, and WhatsApp to distribute links to fake ticket sites. Never click through from social media ads or direct messages claiming exclusive access to tickets.
Beware of delivery methods. Fraudsters often send screenshots or PDF files of tickets, which can be duplicated and sold to multiple buyers. Authentic tickets downloaded from official platforms use secure QR codes linked to a single user account.
Official Ticket Release Timeline
The FIGC has clarified that detailed information about ticket sales for the upcoming Nations League matches will be announced in the coming days exclusively through the federation's official website and verified social media channels. No advance reservations or priority access systems are in place for these fixtures, meaning any site offering pre-booking is fraudulent.
Fans should monitor FIGC.it and the federation's official Facebook, Instagram, and Twitter accounts for announcements regarding sale dates, pricing tiers, and allocation procedures. The federation has emphasized that legitimate sales will only begin after public notification through these channels.
Legal Protections and Enforcement
Italian authorities have stepped up enforcement against ticket fraud. The Guardia di Finanza routinely shuts down fraudulent websites and investigates operators behind scam platforms. In several recent cases involving Serie A clubs—including matches at Salernitana—multiple spectators were turned away at stadium gates after electronic scanners detected counterfeit or duplicate tickets, triggering criminal investigations.
For major events, Italian law mandates nominative tickets with assigned seating for higher-category stadiums. Access is controlled through automated systems using fixed or mobile scanners that validate ticket authenticity in real time. Some high-risk matches impose transfer bans, prohibiting ticket resale to third parties altogether.
Victims of ticket fraud can report incidents to the Polizia Postale, Italy's cybercrime unit, through its online portal. Vivaticket also operates a whistleblowing channel for reporting violations and suspected fraud.
Broader Context of Digital Fraud in Italy
The ticket scam warning comes amid a broader surge in digital fraud across Italy. In recent years, digital scams have cost Italian consumers hundreds of millions of euros, with phishing—where criminals impersonate legitimate organizations to steal credentials—remaining one of the most prevalent techniques.
Football-related fraud is particularly lucrative for criminals because of the emotional attachment fans have to their teams and the high demand for tickets to sold-out or internationally significant matches. The upcoming World Cup in 2026 has created an especially fertile environment for scammers, with researchers warning that fans face unprecedented levels of risk when navigating unofficial ticket sources.
Action Items for Supporters
The FIGC's guidance is clear: purchase tickets exclusively through Vivaticket.it or authorized Vivaticket agencies. Before completing any transaction, verify the web address character by character, ensure the payment method offers buyer protection, and confirm that sale announcements have been posted on the federation's official channels.
If an offer seems unusually advantageous or a website pressures you to act quickly, treat it as a scam. With hundreds of thousands of compromised credentials already circulating and thousands of malicious domains active, the safest approach is strict adherence to official channels—no exceptions.
