Scammer Alert: Cybersecurity Professionals Caution Fans About 3 IPL-Related Fraud Schemes
Click to start listening
Synopsis
As IPL fever grips millions, cybersecurity experts warn fans of potential scams. Kaspersky identifies three major scams targeting cricket enthusiasts, urging caution and providing safety tips to avoid falling victim to fraud.
Key Takeaways
- Scammers are targeting IPL fans through fake ticket listings.
- Streaming websites may redirect users to phishing pages.
- Promotional campaigns claiming free tickets are often traps.
- Verify URLs for authenticity and security.
- Purchase tickets only from official sources.
Mumbai, April 8 (NationPress) With millions captivated by the Indian Premier League (IPL), the excitement has attracted not only fans but also online scammers and fraudsters. This has ushered in the IPL fever-driven Scammer Season.
As the IPL ignites a surge of online activity, with countless fans seeking tickets and information, experts from the global cybersecurity and digital privacy firm Kaspersky have pinpointed three prevalent types of online scams. They are cautioning Indian cricket enthusiasts to be vigilant against schemes that exploit the popularity of this major cricketing event, which commenced on March 23 and is currently being held at various locations across the nation.
Kaspersky has also shared visual representations of some fraudulent pages to help unsuspecting individuals protect themselves from falling victim to these scams.
Cybersecurity experts have identified three IPL-related strategies that fraudsters are employing to entice fans of the league. These scams include: pages masquerading as ticket listings, streaming sites leading to various other scams, and promotional schemes that falsely claim to offer free IPL tickets.
The first and most alarming of these fraudulent tactics involves scam pages posing as ticket listings.
Kaspersky researchers have flagged websites that pretend to sell tickets for IPL matches. Fraudsters create sites that imitate official ticketing platforms, complete with logos, branding, and convincing interfaces. Victims are typically required to make payments via a bank card, with no possibility of refunds. Following payment, as is customary in such schemes, tickets are never delivered,” the company stated.
Another method used by cybercriminals to ensnare IPL fans involves malicious streaming websites.
“One page identified by Kaspersky claims to provide free live streaming of IPL matches, but instead redirects users to various other scam or phishing websites that may steal personal data, infect devices with malware, or deceive users into paying for nonexistent products or subscriptions,” the release indicated.
In yet another scheme uncovered by cybersecurity researchers, fraudulent pages are presented as promotional campaigns, falsely claiming to offer free IPL tickets.
“As part of this process, users are instructed to share their phone numbers. Furthermore, potential victims are encouraged to distribute the link to friends and groups on WhatsApp — supposedly to unlock the next phase for ticket delivery. Scams like these often aim to harvest phone numbers for sale on the dark web or initiate phishing attacks, and may also generate revenue by manipulating traffic and displaying ads,” the release said.
“Events like IPL 2025 attract massive crowds both online and offline; cricket enthusiasts across the nation are on the lookout for the best deals on tickets and cricket merchandise. This makes them prime targets for cybercriminals seeking to deceive and steal their information and funds. Scammers leverage this consumer demand to devise various fraudulent schemes and ensnare consumers,” commented Purshottam Bhatia, Head of Consumer Business for India at Kaspersky.
“Currently, with AI-driven phishing scams, avoiding these threats has become even more difficult for users. In 2024, our solutions blocked 26 percent more phishing attempts globally compared to 2023. We anticipate that fraud schemes intended to steal data and money will continue to escalate in 2025, requiring consumers to be increasingly vigilant and proactively safeguard their systems,” he added.
Kaspersky has also provided some dos and don'ts to assist Indian cricket fans in staying secure and evading IPL-related scams, urging them to protect themselves by installing a trustworthy cybersecurity solution.
Kaspersky experts suggested measures to help Indian cricket fans shield their data and finances from scammers this IPL season. These include purchasing tickets exclusively from official platforms and avoiding third-party sellers offering “exclusive” or “discounted” tickets.
Fans are also advised to use only authorized IPL streaming services such as JioCinema, Hotstar, or Star Sport and to steer clear of “free live streaming” links from unfamiliar sources.
They have been instructed to carefully verify website URLs – fake sites often contain misspellings (for instance, “hotstarr.com” instead of “hotstar.com”). Always check for HTTPS security.
Additionally, they have been cautioned against entering personal or financial details on unrecognized websites. Legitimate platforms will never request bank details, OTPs, or passwords for ticket verification,” the release stated.
Fans are also advised to refrain from downloading IPL-related apps from unofficial sources. Always check the developer's name and review user comments before installing any app.
