As interest in the Indian Premier League (IPL) continues, cybersecurity researchers are warning fans in India about scam websites exploiting the tournament’s popularity through phishing and fake betting platforms.

These scams often use newly created or typo-based domains that imitate legitimate websites. Many are short-lived, making it harder for users to verify authenticity or recover money after fraud. Users are often asked to create a “Betting ID” and then redirected to messaging apps such as WhatsApp instead of being taken through standard verification processes.

The scams rely heavily on urgency and excitement around the tournament, pushing users to act quickly without proper checks. The use of messaging apps for account creation or transactions is a major warning sign, as legitimate platforms typically follow secure onboarding and verification procedures.

Researchers also note that the short lifespan of these websites allows attackers to frequently rotate domains and avoid detection.

To reduce risk during the IPL season, users are advised to:

• Be cautious of newly created or suspicious websites

• Double-check URLs before engaging with a platform

• Avoid creating betting accounts through messaging apps

• Be wary of platforms that skip verification steps

• Avoid sharing personal or financial information on unverified sites

• Watch for urgency tactics such as limited-time offers

• Report suspicious websites or messages to relevant authorities or cybercrime helplines

The broader warning is that major sporting events like the IPL create opportunities for cybercriminals to exploit high user engagement across digital platforms.

Join the community of 2M+ industry professionals.

Subscribe to Newsletter to get latest insights & analysis in your inbox.

All about ETCISO industry right on your smartphone!