If you got a message from a friend in WhatsApp saying that Disneyland is giving away tickets, just politely ignore it: It\u2019s a hoax. In this post, we explain how it works.<\/p>\n
Here\u2019s what happens. You get a message from someone in your friend list about a ticket giveaway. If you head to the site, you might read about, say, 500 free tickets to mark Disneyland\u2019s 110th anniversary. Nearly 300 have supposedly been snapped up already, but about 200 are still temptingly available.<\/p>\n
What\u2019s more, the page is brimming with comments, seemingly from other users falling over themselves to praise Disneyland and post pictures of the tickets they won.<\/p>\n
The procedure for getting a free ticket is very simple. Complete a short survey (usually about 5 simple questions, such as: Have you been to Disneyland before? Are you 18 or over? Do you like Disneyland?), and then share the message with your WhatsApp friends, for which a special button is handily provided on the site.<\/p>\n
After that, you\u2019re prompted to boldly click or tap the \u201cGet Tickets\u201d button. But, for some strange reason, the tickets are not forthcoming. Instead, you are likely to be redirected to another site, which sends you to a third, and from there to a fourth, and so on.<\/p>\n
In the end, you might end up on a site offering some shady goods or services. In general, you will be redirected to a partner site, so that the owners of the fake Disneyland landing page can be paid for the traffic.<\/p>\n
This scheme is now very common, and new fake pages pop up almost daily. WhatsApp or Facebook are used for sending messages, and users are complicit in distributing them when they click \u201cShare\u201d in the hope of getting free tickets.<\/p>\n
We have observed the spread of such messages supposedly from Disneyland, Legoland, Europa-Park, Air France, Singapore Airlines, and many others. The companies themselves, of course, have absolutely nothing to do with such pages \u2014 the fraudsters simply use famous brands to lure people onto their sites. However, regardless of which companies are exploited, the imitation websites all look similar, and even the comment topics and faces of the commenters are usually the same. Only the logos at the top of the page and certain minor details are different.<\/p>\n
Redirecting traffic to partner sites is not the only monetization scheme. You might instead be sent to a page where you can subscribe to a dubious mailing list, or end up on a malicious website (see our post here<\/a>), or you might be signed up for a mobile operator\u2019s paid services, for which the malefactors earn a percentage. Some media reports state<\/a> that when a user presses the \u201cGet Tickets\u201d button, an attempt is made to steal their personal data, but we were unable to reproduce this scenario.<\/p>\n In any case, even if you\u2019re not threatened with losing money, personal data, or something else, never follow links in such messages.<\/p>\n You should also definitely not share them with friends or post them on Facebook \u2014 you\u2019ll only be helping the scammers to profit. If you receive such a message from a friend on WhatsApp, or spot a link to a nonexistent ticket giveaway on Facebook, kindly inform the sender or poster that they are facilitating a scam.<\/p>\n","protected":false},"excerpt":{"rendered":" WhatsApp and Facebook are swimming in links to ticket giveaways for fairs and airlines. Don’t get excited, though; the tickets are fake.<\/p>\n","protected":false},"author":696,"featured_media":20175,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[2670],"tags":[20,80,1776,546],"class_list":{"0":"post-21922","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-threats","8":"tag-facebook","9":"tag-fraud","10":"tag-tickets","11":"tag-whatsapp"},"hreflang":[{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/whatsapp-fake-tickets-scam\/21922\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/whatsapp-fake-tickets-scam\/15102\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/whatsapp-fake-tickets-scam\/12680\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/whatsapp-fake-tickets-scam\/17028\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/whatsapp-fake-tickets-scam\/15215\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/whatsapp-fake-tickets-scam\/13967\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/whatsapp-fake-tickets-scam\/17713\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/whatsapp-fake-tickets-scam\/16812\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/whatsapp-fake-tickets-scam\/22145\/"},{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/whatsapp-fake-tickets-scam\/25419\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/whatsapp-fake-tickets-scam\/11369\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/whatsapp-fake-tickets-scam\/11267\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/whatsapp-fake-tickets-scam\/10262\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/whatsapp-fake-tickets-scam\/18392\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/whatsapp-fake-tickets-scam\/22281\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/whatsapp-fake-tickets-scam\/23720\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/whatsapp-fake-tickets-scam\/17851\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/whatsapp-fake-tickets-scam\/21985\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.co.za\/blog\/tag\/fraud\/","name":"fraud"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/posts\/21922","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/users\/696"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/comments?post=21922"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/posts\/21922\/revisions"}],"predecessor-version":[{"id":23754,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/posts\/21922\/revisions\/23754"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/media\/20175"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/media?parent=21922"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/categories?post=21922"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.co.za\/blog\/wp-json\/wp\/v2\/tags?post=21922"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}