Cybercriminals are exploiting BTS’s return to the concert circuit with a wave of fake ticketing websites that mimic official sales pages and target fans across several countries, adding a new layer of risk to one of the biggest live music events of the year. Security researchers say the scam campaign has surfaced as the group’s “ARIRANG” world tour drives intense demand following the completion of military service by all seven members and the band’s return to full-group activity.
The fraud appears to be organised around genuine tour dates rather than invented performances, making it harder for fans to spot. BTS’s tour is officially listed by BIGHIT MUSIC, while a Weverse notice set out presale and general onsale windows across North America and Europe in January. That legitimate sales framework has given scammers an opportunity to build convincing lookalike sites around authentic venues, dates and ticket windows.
Kaspersky said it had identified at least 10 fraudulent domains created in early April that imitated presale pages for concerts in Argentina, Brazil, Chile, Colombia, France, Mexico, Peru, Portugal and Spain. According to the company, the fake pages reproduced the design and purchase flow of official platforms closely enough to appear credible to ordinary users. Links to the sites were circulating mainly through Instagram, where fans were steered towards pages designed to harvest payments and personal information.
Part of what has made the scam effective is the complexity of ticket sales in different markets. Kaspersky said that in Brazil some organisers adopted a pre-booking system in which a user first reserves online and then pays at the box office. That extra step, intended to curb scalping, also created confusion that criminals could exploit by presenting false booking confirmations or payment prompts. Fraud campaigns tied to headline entertainment events often thrive in exactly this kind of environment, where scarcity, urgency and unfamiliar ticket rules combine to lower buyers’ defences.
Demand for BTS tickets has been exceptional from the moment sales opened. Reuters reported in January that fans crowded internet cafés in Seoul and raced to secure seats for the opening Goyang shows as the band prepared to release its first new album in more than three years and begin a global tour in April. By this month, Reuters and AP were reporting sold-out performances and the group’s first full-scale return after a hiatus that began in 2022 while members completed South Korea’s mandatory military service. AP said Suga, the last member to finish service, was discharged in June 2025.
Authorities have also been dealing with a separate but related problem: illegal resale. South Korea’s Culture Ministry said it had taken action over suspected scalping linked to BTS performances after detecting 1,868 posts advertising ticket resale between 23 January and 9 March, according to local reports. Four cases involving 105 tickets were referred to the National Police Agency for investigation. Organisers imposed strict controls, including one-ticket limits, identity checks, mobile QR codes that cannot be screenshotted or reissued, and wristbands that cannot be reattached once removed. Those measures are aimed at scalpers, but they also underline how tightly controlled genuine access has become.
Outside South Korea, pressure has been visible in other markets. Reuters reported in January that Mexico’s president had formally asked her South Korean counterpart to help arrange more BTS concerts after demand for the scheduled Mexico City dates far exceeded supply. The same report said consumer complaints prompted scrutiny of ticketing and resale practices there, with concerns over steep resale mark-ups and platform conduct. That kind of frenzy creates ideal conditions for scammers, who rely on fans acting quickly before checking whether a website or seller is authentic.
Consumer protection guidance offers a fairly consistent picture of the warning signs. The US Federal Trade Commission says ticket abuse often involves buyers hiding identities, using multiple accounts or deploying bots to break purchasing rules and profit from resale. Ticketmaster warns that legitimate sellers will not ask buyers to pay with gift cards, wire transfers or similar methods, and advises users to rely on official support channels when checking suspicious offers. For fans, the safest route remains the least glamorous one: use the artist’s official links, verify the domain carefully, distrust social-media redirects, and avoid any seller demanding unusual payment terms or manufactured urgency.
The fraud appears to be organised around genuine tour dates rather than invented performances, making it harder for fans to spot. BTS’s tour is officially listed by BIGHIT MUSIC, while a Weverse notice set out presale and general onsale windows across North America and Europe in January. That legitimate sales framework has given scammers an opportunity to build convincing lookalike sites around authentic venues, dates and ticket windows.
Kaspersky said it had identified at least 10 fraudulent domains created in early April that imitated presale pages for concerts in Argentina, Brazil, Chile, Colombia, France, Mexico, Peru, Portugal and Spain. According to the company, the fake pages reproduced the design and purchase flow of official platforms closely enough to appear credible to ordinary users. Links to the sites were circulating mainly through Instagram, where fans were steered towards pages designed to harvest payments and personal information.
Part of what has made the scam effective is the complexity of ticket sales in different markets. Kaspersky said that in Brazil some organisers adopted a pre-booking system in which a user first reserves online and then pays at the box office. That extra step, intended to curb scalping, also created confusion that criminals could exploit by presenting false booking confirmations or payment prompts. Fraud campaigns tied to headline entertainment events often thrive in exactly this kind of environment, where scarcity, urgency and unfamiliar ticket rules combine to lower buyers’ defences.
Demand for BTS tickets has been exceptional from the moment sales opened. Reuters reported in January that fans crowded internet cafés in Seoul and raced to secure seats for the opening Goyang shows as the band prepared to release its first new album in more than three years and begin a global tour in April. By this month, Reuters and AP were reporting sold-out performances and the group’s first full-scale return after a hiatus that began in 2022 while members completed South Korea’s mandatory military service. AP said Suga, the last member to finish service, was discharged in June 2025.
Authorities have also been dealing with a separate but related problem: illegal resale. South Korea’s Culture Ministry said it had taken action over suspected scalping linked to BTS performances after detecting 1,868 posts advertising ticket resale between 23 January and 9 March, according to local reports. Four cases involving 105 tickets were referred to the National Police Agency for investigation. Organisers imposed strict controls, including one-ticket limits, identity checks, mobile QR codes that cannot be screenshotted or reissued, and wristbands that cannot be reattached once removed. Those measures are aimed at scalpers, but they also underline how tightly controlled genuine access has become.
Outside South Korea, pressure has been visible in other markets. Reuters reported in January that Mexico’s president had formally asked her South Korean counterpart to help arrange more BTS concerts after demand for the scheduled Mexico City dates far exceeded supply. The same report said consumer complaints prompted scrutiny of ticketing and resale practices there, with concerns over steep resale mark-ups and platform conduct. That kind of frenzy creates ideal conditions for scammers, who rely on fans acting quickly before checking whether a website or seller is authentic.
Consumer protection guidance offers a fairly consistent picture of the warning signs. The US Federal Trade Commission says ticket abuse often involves buyers hiding identities, using multiple accounts or deploying bots to break purchasing rules and profit from resale. Ticketmaster warns that legitimate sellers will not ask buyers to pay with gift cards, wire transfers or similar methods, and advises users to rely on official support channels when checking suspicious offers. For fans, the safest route remains the least glamorous one: use the artist’s official links, verify the domain carefully, distrust social-media redirects, and avoid any seller demanding unusual payment terms or manufactured urgency.
Topics
World