Thousands of dollars for a Category 1 ticket to the World Cup final at MetLife Stadium. That was FIFA's opening price. With dynamic pricing switched on, the same seat climbed into five-digit territory through the official channel. And somewhere in the secondary market an extreme VIP case surfaced in the millions. The organisation did not fight that madness. It engineered it.
For years, FIFA sold the idea that the secondary market was the enemy. At Qatar 2022 it kept a tight grip on official resale, capped prices at face value and charged marginal commissions. For 2026 it did the opposite. It copied the model of airlines and ride-sharing platforms, plugged in an algorithm that moves prices in real time according to demand, and gave up any maximum cap at the United States venues. Resale stopped being an operational problem and became a line of business with a corporate signature.
The mechanism by which FIFA collects is what exposes the play. On its official resale platform it charges a 15% fee to the buyer and another 15% to the seller. Thirty per cent per transaction that the house keeps every time a ticket changes hands. The more speculation, the more it earns.
With that expectation, FIFA ended up competing head-to-head with StubHub and SeatGeek. The referee became the bookmaker.
The curious thing is that deregulation was not uniform, because it could not be. In Mexico, under pressure from the government and PROFECO, FIFA was forced to cap resale on its portal at the original face value. The same happened in Ontario, because amendments to the 2017 Ticket Sales Act prohibit listing tickets above face value for matches at the Toronto Stadium. The result is a schizophrenic map. A ticket for the round of sixteen in the United States floats freely toward infinity, while one from the same round at the Estadio Azteca or in Toronto is pinned to the purchase price. Anyone looking to speculate already knows which country to open the app in.
The primary-sale controls looked laboratory-grade. One registration per household, automated deduplication of addresses, validation against unique payment data. On paper, airtight. In practice, the scalping networks walked straight through. They no longer use crude bots. They build structures of cloned accounts with real postal addresses, residential proxies and VPNs that simulate individual human behaviour to avoid triggering geographic alerts. They defeat card filters with hundreds of temporary virtual cards from different banks and corporate entities. They fire up to 300 purchase requests per second during critical windows. And when the CAPTCHA gets difficult, they bring in offices with human staff managing accounts by hand.
FIFA itself boasted of hundreds of millions of requests when the early-sale phase closed. Record figure, front-page headline. Beneath the headline, the same organisation informally acknowledged that it was unable to calculate what percentage came from professional networks. The US BOTS Act, which makes it illegal to circumvent ticketing technology measures, has proved almost useless because tracking and sanctioning structures spread across half a dozen jurisdictions is a nightmare nobody wants to solve.
With paper tickets now extinct, everything runs through digital transfer, and that is where the fraud got creative. The street tout became a physical node in a digital network. He finds the fan through geolocated messaging groups at the stadium gates, collects cash or payment via Zelle or Venmo, and transfers the ticket from his FIFA account to the buyer's on the pavement. And when it is not a man on the street, it is a phishing network. Cybersecurity analysts detected cloned portals with an interface identical to FIFA's, hosted on at least fifteen IP addresses and rotating ports — from 3100 to 8080, to 8081, to 3010 — to evade firewalls. With stolen credentials they execute an account takeover, change the email and password, lock the legitimate holder out and sell their genuine tickets on dark Telegram channels at inflated prices. The fan pays, and discovers at the gate that the ticket is no longer theirs.
The signature fraud has a technical name: ghost ticketing. A tout lists seats on StubHub that they do not yet own, betting on buying them cheaper before the match. If the price runs above their calculations, they cancel the sale without consequence. The platform promises a refund or alternative ticket — a ridiculous consolation for someone who has already spent thousands of dollars on non-refundable flights and hotels. Litigation against the platforms always tells the same story. A buyer turned away at the stadium gate with fraudulent passes, and the court, rather than ruling on the merits, sends the case to private individual arbitration under the user contract clause. The platforms shield themselves from class actions and dump all the risk onto the consumer.
The price, meanwhile, behaves like a stock in a panic. When the United States fell 4–1 to Belgium in Seattle and Portugal lost 1–0 to Spain, the dream blockbuster quarter-final matchup evaporated. The get-in price for those matches crashed 31.5% in 48 hours and accumulated a fall of 50.4% in three days, while resale inventory jumped from 28,285 to 49,415 tickets. The professionals flooded the market to cut losses. Just as in the stock market, everyone sells at once when the asset stops exciting them.
The honest objection carries weight. A free-price market allocates tickets to whoever values them most, say the algorithm's defenders, and at least FIFA takes a margin that previously went entirely to the touts. Half true. Because FIFA did not simply let the market do its work. Several state attorneys general are investigating whether the organisation manipulated seating maps. The complaint holds that it sold the capacity in four categories, and once millions had bought blind, introduced new premium categories, demoting Category 1 buyers to worse zones in order to resell the best seats at a price three times the original. Manufactured scarcity. Other jurisdictions have opened similar inquiries, some focused on matches played at their venues, and they also point at StubHub for facilitating ghost ticketing, with consumer protection audits under way on both sides of the border.
The United Kingdom, with EURO 2028 on the horizon, is already preparing the Sporting Events Bill and the Draft Ticket Tout Ban Bill, which criminalise unauthorised resale, impose a face-value cap and require social networks to verify listings. That is the opposite direction to the one FIFA took. One of the two models protects the fan and the other milks them. It remains to be seen which one the next organisers copy when they discover that speculation, properly invoiced, yields 3 billion dollars.
