Cybercriminals across India have been running sophisticated operations exploiting the high demand for Indian Premier League matches through fake ticketing websites, malicious streaming platforms, and data theft. According to reports from cybersecurity companies and police, fraudsters created hundreds of fraudulent domains mimicking authorized ticketing platforms like BookMyShow, District, and Royal Challengers Bengaluru portals. These sites used countdown timers and fake seat availability warnings to pressure fans.
Everything you need to know about this case, in one place.
Cybercriminals across India have been running sophisticated operations exploiting the high demand for Indian Premier League matches through fake ticketing websites, malicious streaming platforms, and data theft. According to reports from cybersecurity companies and police, fraudsters created hundreds of fraudulent domains mimicking authorized ticketing platforms like BookMyShow, District, and Royal Challengers Bengaluru portals. These sites used countdown timers and fake seat availability warnings to pressure fans.
Victims were lured through social media ads on Meta platforms, Instagram, and Telegram groups, as well as search engine optimization. After selecting seats and paying via UPI or cards, buyers received fake PDF tickets and discovered the fraud only at the stadium gates. In Bengaluru specifically, police registered a cyber fraud case after a fake website mimicking the Royal Challengers Bengaluru ticketing platform duped fans, with preliminary investigations indicating transactions potentially worth crores of rupees.
Separately, malicious streaming platforms promised free live matches while actually distributing malware such as macOS infostealers that targeted credentials, banking data, and cryptocurrency wallets. Authorities and cybersecurity researchers have advised fans to use only official platforms, avoid unverified streaming links, and remain cautious of unofficial discounts or urgent pop-up warnings.
Not yet reported: The exact total financial loss across all fraudulent networks and the identities or arrest status of the masterminds behind the fake websites are not reported.
The latest position in the reports we read.
Police have registered a cyber-fraud case, initiated investigations into the transaction accounts, and requested the removal of fraudulent links from social media platforms, while advising the public to avoid unofficial ticket sites.
Described in general terms; we do not name victims.
Cricket fans and online users seeking IPL match tickets or free live match streaming, including individuals in Bengaluru who filed complaints after losing money on fake portal links.
Key dates as reported, oldest first.
The method described in the reports.
Call 1930 (free, 24x7) straight away, then file at cybercrime.gov.in. Money reported in the first hours is far easier to freeze.
More cases like this one.
Optional. The full story is above; these are the original reports it was prepared from.
Prepared by Report Scams, with the help of AI, from the published reports listed above. Check those reports for the latest. Cases here describe allegations. An FIR, arrest or charge is not a finding of guilt. To report a mistake, or to ask for a correction or removal, write to our Grievance Officer. See also the Safe Posting policy.