PhishingPublished 9 Apr 2026

Fake BTS ARIRANG tour tickets: K-pop fans being targeted by scammers | Kaspersky official blog

Source Kaspersky Security Blog

Description

A BTS comeback and world-tour announcement has resulted in a new wave of scam campaigns. Kaspersky experts have discovered fraudulent websites that sell fake BTS tickets to fans all around the world. We explain what those fake pages look like, and how you can avoid getting scammed.

Impact

Fans attempting to purchase BTS ARIRANG tour tickets from these fake websites risk financial loss as payments are directed to scam-controlled accounts, often via instant payment systems like PIX. The scam's design makes it difficult to recover funds. Additionally, victims who provide card information may face unauthorized transactions. The fraudulent sites undermine trust in official ticketing processes and exploit social engineering to induce panic and impulsive payments.

Defensive guidance

Users should only purchase tickets through official BTS or event organizer websites, accessed by typing URLs directly rather than following links from social media or messages. Carefully verify website domains for subtle alterations and check for the presence of Privacy Policy and Terms of Use pages, though their presence alone does not guarantee legitimacy. In Brazil, avoid making online payments during pre-sale, as payments should be made in person. If scammed, immediately contact your bank to block or reissue cards and enable real-time banking alerts. Employ cybersecurity solutions capable of detecting and blocking fraudulent websites. Follow vendor guidance from official BTS and ticketing sources.

Summary

Following BTS's comeback and announcement of their ARIRANG world tour, scammers launched phishing campaigns using fake websites that closely replicate official ticket pre-sale pages across several countries. These sites simulate legitimate purchasing workflows, including payment options, but direct payments to fraudulent accounts, especially exploiting Brazil's PIX instant payment system. The scam capitalizes on fans' eagerness and confusion about new ticketing procedures, employing fake error messages to pressure victims into using scam-preferred payment methods. Kaspersky identified at least 10 such fraudulent domains and provides detailed advice on avoiding these scams.

References

kaspersky.com/blog/bts-world-tour-scam/55581/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 10 Apr 2026, 00:24 UTC

References

Community reviews

Related threats