Together against cybercrime: Information campaign on ESC ticket purchase
With the Eurovision Song Contest 2026 in Vienna, the world's biggest TV music event is just around the corner. Such major events attract not only millions of fans, but also fraudsters. The ORF, EBU, BMI, City of Vienna, and the internet platform „Watchlist Internet“ therefore want to raise awareness and draw attention to the biggest cyber threats before the first wave of ticket sales begins on January 13.
A key pillar for secure ticket purchasing is the proven multi-stage ticketing system, which guarantees transparency and fairness. Until December 18, 2025, it was possible to register on the official platforms eurovision.com and oeticket.com. Only after that date will it be possible to purchase tickets on oeticket.com. Anyone who has not yet registered will not be able to purchase tickets in the first wave of sales. Attractive offers and secret contingents on social networks and online platforms, which are often sold at inflated prices, are fake.
The most common tricks of fraudsters
The experiences of cyber experts show that around major events, the number of fake shops and counterfeit ticket offers increases, with fraudsters creating deceptively real copies of ticket websites. Buyers pay but never receive a ticket—or they receive a fake that is rejected at the entrance.
Emails from supposed organizers promising winnings or last-minute tickets should also be ignored—they are phishing emails. A glance at the email address is usually enough to notice that the email is part of a scam.
„Insider tips“ or cheap social media ticket packages on Facebook, Instagram, etc., or classified ads are almost always traps. Dubious surveys about the Eurovision Song Contest are also designed to steal your data or spread computer viruses. It is also recommended that you do not post ticket selfies on social media. The QR code on the tickets can be copied and forged.
A danger aside from ticket sales is the so-called „quishing,“ where criminals cover genuine QR codes on parking meters, electric charging stations, or tables in restaurants with their own stickers. A harmless scan of supposed „ESC info“ with a cell phone leads to fake banking sites that steal sensitive data. What helps is a touch test to identify stickers.
Caution is also advised with the grandparent scam 2.0: AI makes it possible for fraudsters to clone the voices of relatives. According to cyber experts, this could become particularly problematic during the show weeks from May 12 to 16. A call with the deceptively real voice of a family member, such as „Mom, I'm in Vienna at the ESC, my wallet is gone, I need money right away!“ can take even cautious people by surprise. Just a few seconds of audio material from social media videos are enough for so-called voice cloning. In general, it is also good to establish a safety code word with your family for emergencies. The police also advise that it is a good idea to call back from a known number.
Central contact points for tips and help
Security at the 70th Eurovision Song Contest is understood as a collective task. While ORF secures the technical infrastructure, the involvement of the public is a crucial factor. „Security is a team sport,“ says Martin Pils, Head of Cyber Security for ESC 2026, „we rely on tips from the public because we can't see everything.“
A network of contact points has been set up to identify patterns of fraud at an early stage and offer help:
Reporting office:
- Please immediately send suspicious emails or websites related to ESC ticket sales to the central address of ORF: esc-cybersecurity@orf.at
- To report a crime, any police station can be contacted or the Federal Criminal Police Office's online reporting office against internet crime at: against-cybercrime@bmi.gv.at
Help and advice:
- For specific support and advice, please contact the City of Vienna's cybercrime helpline on 01 4000-4006. www.wien.gv.at/kontakt/cybercrime-helpline
Information:
- The Watchlist Internet continuously lists current warnings about online traps on its platform www.watchlist-internet.at
(January 08, 2026)