Cybersecurity experts are warning fans to stay alert for an uptick in scams and cyber threats as Super Bowl 59 approaches.

Whether cheering for the Philadelphia Eagles, the Kansas City Chiefs, or simply watching for the halftime entertainment, football enthusiasts are prime targets for cybercriminals who exploit the excitement surrounding the big game, according to a release from the Cybersecurity Association of Pennsylvania.

From phishing attempts to fake ticket sales, cybercriminals are leveraging emotional connections to deceive fans. To help consumers stay protected, experts highlight the top cybersecurity threats leading up to and following Super Bowl 59.

These include, per the release:

1. Fake Ticket & Merchandise Offers

Scammers are creating fraudulent websites that promise last-minute Super Bowl tickets or exclusive Eagles gear at unbeatable prices. These fake sites often steal credit card information or distribute malware. Fans should only purchase tickets from verified platforms such as Ticketmaster, StubHub, or the official NFL website. For team merchandise, reputable retailers like the Eagles’ official store are the safest option.

2. Malicious QR Codes in Ads & Social Media

QR codes are a convenient way to engage with promotions, but cybercriminals are embedding malicious codes in fake advertisements, leading users to phishing sites or malware downloads. Fans should verify QR codes before scanning, especially if they appear in unsolicited emails or social media posts from unverified sources. QR Codes can often display a malicious page before rerouting your browser to the expected result, meaning you may be compromised without knowing it.

3. Fake Parade Announcements and Post-Game News

If the Eagles win, Philadelphia will erupt in celebration, and scammers will exploit the moment by spreading fake parade details or phishing emails with “exclusive” access or footage. Fans should only rely on official city websites and trusted news sources for event information.

4. Social Engineering Scams Using Taylor Swift and NFL Celebrities

With Taylor Swift’s expected attendance, scammers are using her name and other high-profile figures to bait fans into clicking on fake social media giveaways, VIP meet-and-greet offers, or fabricated news stories. Fans should avoid clicking on links that promise insider access, as they may lead to phishing pages designed to steal personal information.

5. Fraudulent Betting & Fantasy Sports Promotions

The rise in Super Bowl betting and fantasy leagues has led to a surge in scams. Fraudulent betting sites and promotional emails promising guaranteed winnings or special bonuses may be attempts to steal financial data. Fans should stick to well-known, licensed betting platforms and be cautious of unsolicited gambling offers.

Scott Davis, chairman of the Cybersecurity Association of Pennsylvania, emphasized the importance of vigilance, stating, “Cybercriminals know how to exploit fans’ excitement and urgency. Whether it’s fake ticket sales or malicious QR codes, they prey on the emotional connection fans have to the game. Always verify sources before clicking or making purchases.”

Davis also warned against the dangers of social engineering scams. “Scammers are using names like Taylor Swift and Super Bowl MVPs to trick fans into clicking on malicious links. If something seems too good to be true, it probably is,” he said.

Cybersecurity professionals urge fans to remain vigilant and exercise caution when engaging with online content related to Super Bowl 59. By recognizing these threats and following best practices—such as verifying URLs, avoiding unsolicited links, and using trusted sources—fans can protect themselves from cyber threats while enjoying the excitement of the game.