World Cup Album scam: discover how it works and how to stay safe!

It’s no secret that cybercriminals tend to try to benefit from new features and moments of popular euphoria to implement their scams. This is the case of the World Cup album scam on WhatsApp.

Let’s take a look at how this scam works and how to avoid it.

How the World Cup album scam works

The con begins with a message on WhatsApp, which may even be sent by a friend, relative or someone else you trust, that s, someone who has unwittingly fallen for the scam, too.

In this message, the con artist alleges that you’ve been selected for an exclusive lucky draw, with the prize being a 2022 FIFA World Cup album and 400 cards, all for free. The message is accompanied by a malicious link that directs the user to a fake website or to a download for a fraudulent app.

The user then accesses the website or downloads the app in question and follows the recommended steps to participate in the promotion, which generally involves answering a few questions or completing a registration. Soon after, the fraudulent page simulates a fake lucky draw and reveals that the user is the lucky winner of the prize! However, to claim it, the user has to share the draw with several contacts via WhatsApp and provide a series of personal information so the prize can be shipped. 

And that’s how scammers steal victims’ data and stimulate the propagation of the con.

Why has this scam spread so much?

Two main reasons explain why this scam has spread so rapidly. 

The first is that the FIFA World Cup has already kicked off and there’s a lot of interest in completing the album. In other words, the scam has gained momentum due to the opportunity to win the prize on offer.

The second motive is the actual dynamic behind the scam. As mentioned earlier, to win the prize, victims have to share the lucky draw via WhatsApp. And not only with a single account. Victims are obliged to share the promotion with 5 groups or 20 contacts. And that’s how the malicious link spreads progressively to more and more people.

How to avoid the World Cup album scam

• If you receive any type of lucky draw or prize via WhatsApp, research whether the promotion is real first. Access the official website of the company mentioned before taking any action.

• Don’t provide personal information or make any payments on websites or apps without first making sure that the page is secure and authentic.

• It is also important to not share content, especially if you’re unsure whether or not it is real.
  

• Don’t download unfamiliar apps, especially if someone on WhatsApp recommends you install them. The best bet is to ignore the message and check the developer’s official website to ensure the app is trustworthy.

Article originally written in Portuguese by Perallis Security Content Team: Golpe do Álbum da Copa: descubra como funciona e como se proteger — Perallis Security