
Fake “FBI Agents” Target Scam Victims in DMs
The FBI’s IC3 warns that scammers are impersonating FBI/IC3 staff on social media and messaging apps, especially targeting people who have already been…
Scammers are approaching Céline Dion fans on Facebook and steering them into paying for “tickets” outside official resale channels. Victims may even receive a real-looking Ticketmaster transfer link, but scammers send the same ticket to multiple buyers so only the first person scanned at the venue gets in. A parallel campaign uses Ticketmaster/AXS lookalike websites (including Shopify-based stores) to collect payments and personal details.
Scammers approach Celine Dion fans inside Facebook groups and Marketplace listings, then move the conversation into private messages. Trust is built gradually through personal messages and voice recordings before any money changes hands. Once rapport is established, the seller introduces urgency, often claiming that numerous other fans are interested and that the ticket could sell within minutes. This pressure is designed to push buyers toward a quick decision before they can verify anything.
A parallel version of the scam relies on cloned websites impersonating Ticketmaster, AXS, Celine Dion's official site, and the concert venue. Researchers documented more than 20 related domains, some built on Shopify with realistic checkout flows, payment subdomains, and fake Trustpilot ratings designed to look credible at a glance.
Some victims do receive what looks like a genuine Ticketmaster transfer link, complete with a digital ticket and entry code that appears normally in their account. The catch is that scammers send the same ticket and entry code to multiple buyers. Only the first person whose code is scanned at the venue gets in, while every other buyer is turned away with no recourse.
The combination of a plausible interface, social trust built in advance, and urgency pressure makes it easy for buyers to skip the verification steps they would normally take.
Fans should start any ticket purchase from Celine Dion's official concert page or an authorized distributor such as Ticketmaster, AXS, or Fnac, rather than following links shared by unknown sellers. Direct bank transfer requests outside official channels should be treated as a stop sign, and any mismatch between a seller's displayed identity and their payment account name should end the transaction. Buying through links posted by strangers gives fraudsters control over both the payment method and the information shown to the buyer, which is exactly the leverage this scam depends on. Slowing down, verifying the source, and using official resale channels closes off both the social pressure tactic and the lookalike website tactic at once.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
They target fans in Facebook groups and Marketplace, build trust through private messages and voice recordings, then apply urgency pressure by claiming many other buyers are interested and the ticket could sell within minutes.
Scammers send the same digital ticket and entry code to multiple buyers, so only the first person scanned at the venue is admitted while everyone else is refused entry.
Watch for lookalike domain names, checkout pages built on platforms like Shopify, and fake trust signals such as fabricated Trustpilot ratings; buying through links from unknown sellers gives fraudsters control over both payment and the information shown.
Avoid direct bank transfers requested outside official resale services, and check that the seller's identity matches the name on the payment account before sending money.
Picture this: you finally find Céline Dion tickets in a Facebook fan group… at a decent price. The seller moves to private messages and voice notes, says, “lots of fans are waiting, this could sell within minutes,” then asks for a direct bank transfer to a name that doesn’t match their Facebook profile. Some buyers even get what looks like a real Ticketmaster transfer link or land on a Ticketmaster‑CelineDion‑tickets.shop checkout with fake Trustpilot stars, then discover the same ticket was sold to multiple people. Your move: for any Céline Dion tickets, never pay by direct bank transfer or random link, start at the official artist, venue, Ticketmaster, or AXS site and only buy or resell from there.

The FBI’s IC3 warns that scammers are impersonating FBI/IC3 staff on social media and messaging apps, especially targeting people who have already been…

The FBI warns scammers are impersonating FBI/IC3 staff and re-targeting people who already lost money to fraud. The scammers use emails, phone calls, social…

The FBI warned that scammers are impersonating IC3 leadership using AI-generated (deepfake) videos and spoofed IC3 websites to trick prior fraud victims into…

Scammers are posing as FBI staff who supposedly handle IC3 (Internet Crime Complaint Center) reports to trick people who have already been scammed once. The…

This threat trend report describes multiple real-world APT campaigns that rely on social engineering (job offers, fake recruiters, code reviews, and…

Researchers reported a real spearphishing campaign that impersonates DocuSign emails to trick tech executives into clicking “Review Document” links and…