Field note · 7 min read

Fake concert and event ticket scams, explained

Sold-out shows are the bait. Here is the machinery behind fake ticket ads, lookalike resale sites and screenshot barcodes — and the four checks that actually protect your money.

The tour sold out in four minutes. You did not get tickets. Two hours later a post lands in your feed: two seats together, face value, seller has to work that night, can send them right now. That timing is not luck. It is the product.

Ticket fraud is not a rare edge case. Action Fraud, the UK's national fraud reporting centre, logged 9,826 ticket fraud reports in 2024 with reported losses of £9,794,034 — an 11% rise in reports and a 47% rise in losses over 2023. Concert tickets were mentioned in 38% of those reports. In the US, the FTC found that in 2025 nearly 30% of people who reported losing money to a scam said it started on social media, and more people reported losing money to scams that began on Facebook than on any other platform.

This is a pattern explainer, not an accusation. No company, page or seller is named here as a culprit — the documented cases live on the verdict pages. What follows is the machinery: how the ad reaches you, why the site survives a glance, why a barcode image is worthless, and the one payment demand that should end the conversation.

Sold out is the bait, not the obstacle

The scarcity does the persuading, so the seller does not have to. They only have to be available at the moment you are looking. The FTC notes that scammers buy ads and use the same targeting tools legitimate businesses use — age, interests, shopping habits — which is why the offer appears right after you searched the tour or followed the artist. The FTC also notes that scammers hack real accounts. A post from a friend of a friend carries trust that a stranger's post never would, and the person whose account it is often has no idea it is happening.

Then comes the compression. Someone else is asking. I have to leave in twenty minutes. I will hold them for you if you send now. Legitimate resale inside an official platform does not need you to decide in ten minutes, because the platform holds the transfer and the payment. Watch the supply signal too: the show is sold out, yet this seller has pairs available, priced at or below face. The BBB lists unrealistically low prices as a core red flag, and for a genuinely sold-out show, resale prices move up, not down. Cheap and plentiful for something scarce is not a bargain. It is a tell.

The site is built to survive a glance

Copying a ticketing page is trivial. The lie lives in the domain. In May 2026 the FBI's Internet Crime Complaint Center issued a public service announcement about threat actors spoofing FIFA's website ahead of the 2026 World Cup, using alternate spellings, misspelled variants and non-standard top-level domains — it cited examples such as fifa.cab, fifa.pink and fiffa.org. The purpose was to collect names, addresses, phone numbers, emails and banking details, and to sell fake tickets and hospitality packages. That template gets reused for any high-demand event.

The padlock in the address bar tells you the connection is encrypted. It tells you nothing about who is on the other end. The FBI's advice is blunt: type the official address yourself instead of clicking through, avoid sponsored search results, and use a bookmark for sites where you log in. The BBB adds the physical checks — a working phone number, a real postal address, support that answers, and a name that is not a near-miss of the real festival's name. Reviews printed on the site itself are worth nothing; whoever built the page wrote them.

A screenshot, a PDF or a barcode is not a ticket

Look at what the seller actually sends you: a screenshot of a ticket, a PDF, a photo of a barcode, a forwarded confirmation email. New York's Division of Consumer Protection warns specifically that scammers send convincing-looking screenshots, barcodes and confirmation emails. None of it is proof of anything, because an image can be sent to ten buyers at once. The first person scanned gets in. Everyone else is turned away at the gate holding something that looks perfectly legitimate on their phone.

Real transfer happens inside the platform that issued the ticket. It moves into your account, and the seller's copy stops working. Many digital tickets now use barcodes that refresh on a timer and only render inside the official app, which is precisely why a static screenshot cannot be a valid entry credential. New York's guidance is to buy resale only through official platforms with built-in transfer. So make it the hinge of the deal: if the seller cannot transfer the ticket to your account inside the official system, they either do not have it, or they plan to sell it again.

The payment demand is the whole scam

Everything before this point is theatre. The scam completes at payment, and that is where it is easiest to catch. Watch for bank transfer, "friends and family", gift cards, crypto or a cash app as the only accepted method. The FTC's rule of thumb is direct: if someone says the only way to pay is by bank transfer, wire transfer, cryptocurrency, payment app or gift card, that is a scam. PayPal's own help pages say friends-and-family payments carry no Purchase Protection and tell buyers to refuse when a seller pushes for one. The request is not about saving a fee. It is about removing your ability to reverse the payment.

Pay by credit card. Credit purchases carry dispute rights under the Fair Credit Billing Act, which the FTC enforces, including for things you paid for and never received. Debit is weaker. A bank transfer is weakest of all. If you have already paid: contact your bank or card issuer immediately and ask about a chargeback or a payment recall, report the ad and the account to the platform, and file a report — ReportFraud.ftc.gov in the US, Action Fraud in the UK, plus BBB Scam Tracker. Screenshot the profile, the ad, the full message thread and the payment record first. Scam accounts get deleted, and so does your evidence.

Sometimes the event itself is fake

Not every fake ticket points at a real show. The BBB has warned about promoted festivals and seasonal events that simply do not exist: a social ad leads to a professional-looking site, tickets sell, and nothing is ever staged. In one reported case, a real arts organisation's name was used as the supposed host of an event it had nothing to do with. The pattern is a lineup permanently "to be announced", a venue that is named but never confirms, no local press coverage, no listing anywhere the organiser does not control, and support that stops replying once refunds are requested.

The check is external and it takes two minutes. Search the venue's own website and box office for that date — a venue confirms what it has actually booked. Check the artist's or organiser's official tour page. Check local listings and press. If the only evidence that the event exists is the ad and the site selling you tickets, that is not evidence. That is one source wearing two hats.

How to buy without getting burned

Work the order of preference. Official box office first, then the official promoter or agent, then the ticketing platform's own resale or exchange, where the transfer happens inside the system. Only after that consider a third-party resale site, and only on a credit card. Turn on two-factor authentication for any ticketing account you hold, as New York's consumer protection guidance recommends — an account with transferable tickets in it is worth stealing. And before you pay a stranger anything, check whether the official seller still has stock and whether extra dates have been announced. It costs you nothing to look.

Here is the check. Before money moves, ask four questions in order. One: can the seller transfer the ticket into your account inside the official platform, right now, before you pay? Two: is the payment method one you can reverse — a credit card or a goods-and-services purchase, never friends-and-family, bank transfer, gift card or crypto? Three: did you reach the site by typing the address yourself, and does the domain match the official one character for character? Four: does the venue's own box office confirm the event, the date and the seats exist? A single no is enough to walk away. A genuine seller passes all four without being asked twice, and the one who cannot will always have a reason why this time is different.

Documented cases

Fake concert & event ticket ads →

Sources

Saw an ad you're not sure about?

Check it against the archive of documented Facebook-ad scams.

Browse the verdicts →