Cyber Scams Spike as March Madness Frenzy Unfolds
- March Madness draws heavy scam activity aimed at fans.
- Phishing and fraud, such as fake tickets and merchandise, are common.
- Basic security habits go a long way for fans.
- Expert advice on avoiding scams during big events.
Scammers join the crowd
March Madness draws millions of basketball fans into brackets, bets and watch parties. Cybercriminals follow. The annual tournament gives scammers plenty of chances to exploit fans’ excitement, and the busiest weeks of the tournament are also the busiest weeks for fake ticket sites and betting scams.
Fans search online for scores, tickets and merchandise, and scammers are ready for them. One click on the wrong link can be enough.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Common scams
Fake tickets and merchandise
Fake ticket sales are a common scheme. Scammers set up convincing websites that offer discounted tickets or seats at sold-out games. Once the buyer pays, the tickets are fake.
Fake merchandise stores also appear, offering exclusive or collectible items. These storefronts look credible but disappear once orders are paid for, and buyers lose their money.
Phishing
Phishing is another common tactic. Emails pretending to come from tournament organizers or well-known sports brands trick people into clicking malicious links that install malware or lead to sites built to steal personal and financial information.
If an offer seems too good to be true, it probably is.
How fans can protect themselves
Basic security habits cut the risk. Keep antivirus software up to date. Use multi-factor authentication on email and financial accounts.
Check official event websites and verified social media accounts to tell real offers from fake ones.
What experts say
WABE spoke with Victor Wieczorek, senior vice president of offensive security at GuidePoint Security, who said March Madness makes fans a prime target for scammers. The Better Business Bureau has also warned about realistic-looking fake websites and apps tied to sports betting and tickets.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
The advice is simple: check the source before you click, buy or bet.
Looking ahead
As March Madness grows, scams will grow with it. Organizers can help by treating security as part of event planning and marketing.
Organizers and fans both have a part in keeping the tournament safe.
Fans who stay careful can enjoy March Madness without getting scammed.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Monday’s brief: ConnectWise Cloud Backup comes back, then Aruba Wi-Fi fixes, a Brotli update and Nextcloud’s KEV deadline
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.