Weekend Safety in NYC: The Public Wi-Fi Skimming Trap and 5 Other Scams Targeting Fans Heading to Spring Events
Spring 2026 brings concerts, festivals, weekend stadium games, and pre-World-Cup test events — and with them, a measurable surge in payment skimming, fake-Wi-Fi attacks, and ticket fraud. Here is what New York State’s Division of Consumer Protection is warning about, and the seven concrete steps to take before you leave the house this weekend.

Who This Helps: Anyone heading to a stadium, concert, festival, fan zone, public park event, or large weekend gathering in or around NYC this spring — and anyone receiving suspicious texts, emails, or social media offers tied to those events.

The New York Department of State’s Division of Consumer Protection has issued a 2026 Consumer Alert specifically warning New Yorkers to beware of fake tickets, counterfeit ticket sales, phishing emails masquerading as official organizers, fake merchandise stores, fake giveaways designed to harvest personal data, and fake streaming sites — all tied to the wave of major sporting events touching the New York metro area this year.

The 2026 FIFA World Cup runs June 11 through July 19, with eight matches at MetLife Stadium in East Rutherford, New Jersey, drawing an estimated several million fans to the metro region across the tournament. Spring is the warm-up — preseason events, ticket presales, and a rising volume of scam attempts that begin weeks before the first whistle.

The Public Wi-Fi Trap (The One Most People Miss)

According to Check Point Research and the New York Department of State, scammers near major venues set up unsecured public Wi-Fi networks designed to look like legitimate stadium, restaurant, or transit hotspots — “MetLife_Free,” “NYC_Stadium_WiFi,” “Free_FanZone” — and intercept everything you do while connected.

If you check your bank account, log into a credit card app, sign into email, or buy something while on one of these networks, the scammer can capture your username, password, and in some cases your card details.

What to do:

  • Do not connect to public Wi-Fi at or near any large event. Use your cellular data.
  • If you must use Wi-Fi, use a reputable VPN.
  • Never log into banking, email, or shopping apps on a network you do not control.
  • Turn off auto-connect for unknown networks in your phone settings before you leave the house.

Scam #2: Fake Ticket Listings on Social Marketplaces

Discount tickets to 2026 FIFA World Cup matches, Winter Olympics events, Super Bowl LX, and major concerts are being posted on Craigslist, eBay, Facebook Marketplace, and Instagram. Many are fake. Victims of ticket scams have reported losing an average of around $293, with some losing thousands on counterfeit season tickets or VIP packages, according to data compiled by FindLaw.

What to do:

  • For the World Cup, buy only at FIFA.com/tickets or via the official FIFA app. Most tickets will be delivered electronically through the FIFA app — paper tickets or screenshots are almost certainly fraudulent.
  • For other events, use the venue’s official site, Ticketmaster, or licensed resale platforms like StubHub or SeatGeek.
  • Never pay for tickets with Zelle, wire transfer, cryptocurrency, or peer-to-peer apps. Use a credit card so you can dispute the charge.

Scam #3: Fake Short-Term Rentals

The New York Department of State warns about fake Manhattan rentals on Airbnb or Craigslist for visiting fans, listed at unrealistically low prices, with the “host” asking for a deposit via Zelle, wire transfer, or PayPal Friends & Family — all payment methods with no fraud protection.

What to do:

  • Book only through legitimate platforms with built-in payment protection.
  • Never pay outside the platform, even if the host claims a discount for doing so.
  • If a listing seems too cheap for the neighborhood and date, it almost certainly is.

Scam #4: POS Skimming at Fan Zones and Vendor Booths

Payment fraud remains a persistent risk in tourist-heavy areas and near fan zones. Criminals use skimming devices or compromised point-of-sale terminals to capture credit card information from cards swiped or tapped at vendor stalls, food trucks, and pop-up merchandise booths.

What to do:

  • Use tap-to-pay (Apple Pay, Google Pay) — it generates a one-time token instead of sharing your card number.
  • If you must swipe a card, inspect the reader. If it wiggles, looks bulky, or has anything attached that does not match the surrounding terminals, do not use it.
  • Enable transaction alerts in your bank app before you go out.
  • Check your statements within 24 hours of any large event you attended.

Scam #5: Phishing Texts and “Refund” Emails

Phishing attempts surge around major events. Scammers send texts and emails impersonating ticket sellers, banks, transit authorities, or event organizers, claiming you have a refund waiting, a ticket-delivery problem, or a security alert that needs you to “verify your account” by clicking a link.

What to do:

  • Never click links in unexpected texts or emails about tickets, refunds, or accounts.
  • If a message claims to be from your bank or a ticket seller, close it and go to the official site or app directly — type the URL, do not click the link.
  • Report suspicious texts by forwarding them to 7726 (SPAM).
  • Report event-related fraud to the FTC at ReportFraud.ftc.gov.

Scam #6: “Friendly Greeting” and Urgency Calls

If a stranger calls, texts, DMs, or emails you with urgency about money, an arrest, a refund, an investment, or a great seat — slow down. The New York Department of State emphasizes that almost every event-tied scam collapses the moment you stop and verify through an official channel.

What to do:

  • Hang up. Look up the official number for the agency or company independently.
  • Never give out a Social Security number, payment information, or one-time passcode over the phone to an inbound caller.
  • If a call claims to be from the IRS, NYPD, or ICE demanding payment, it is a scam. None of those agencies request payment by phone or gift card.

How to Take Action Before You Leave the House This Weekend

  1. Sign up for Notify NYC at on.nyc.gov/NOTIFYNYC for real-time alerts about emergencies, weather, transit, and public safety in your area.
  2. Turn off Wi-Fi auto-connect on your phone before you leave.
  3. Set up tap-to-pay on your phone or watch so you do not need to swipe a card.
  4. Enable bank transaction alerts for every purchase.
  5. Tell someone where you are going and roughly when you expect to be home.
  6. Carry a charged phone and a backup battery if you are out all day.
  7. Know how to call 911 and how to use the silent emergency feature on your phone (hold the side button + volume on iPhone, press the power button five times on most Android phones).

If You Have Already Been Scammed

  • Call your bank or card issuer immediately to dispute the charge and freeze your account if needed.
  • File a report with the FTC at ReportFraud.ftc.gov.
  • Report to NYC Department of Consumer and Worker Protection by calling 311 or visiting nyc.gov/dca.
  • Report to the New York State Attorney General’s Office at ag.ny.gov/consumer-frauds.
  • File a police report if you have lost money — it is often required by your bank to process a fraud dispute.

The Bottom Line

Spring 2026 is the lead-up to the biggest sports-event summer New York has seen in decades. The scammers know it. They are already setting up fake Wi-Fi networks, fake ticket sites, fake rental listings, and skimming devices. The good news is that the most expensive mistakes are the easiest to avoid: do not use public Wi-Fi for anything sensitive, do not buy tickets outside official channels, do not pay deposits through Zelle or wire, and do not click links in unexpected messages.

Five minutes of preparation before you leave the house protects months of paychecks.

Verified resources used in this article:

You might also like