Céline Dion is scheduled for 16 Paris concert events in 2026, from September 12 to October 17. Together with the ten extra reveals introduced for Could 2027, the overall is 26 concert events. This makes it a profitable goal for scammers.
Followers looking Fb for tickets to Céline Dion’s 2026 Paris concert events are being focused by scammers who can place a sound digital ticket in a purchaser’s Ticketmaster account and nonetheless depart them unable to enter the venue.
Demand for tickets has remained excessive since Dion introduced her return to reside performances. Her Paris engagement contains 16 concert events at Plénitude Area, previously Paris La Défense Area, between September 12 and October 17, 2026.
Scammers Promoting Faux Live performance Tickets on Fb
The official presale started in April, however fraudulent presents had already appeared earlier than ticket gross sales opened. Céline Dion’s official web site confirms the live performance schedule.
Nonetheless, cybersecurity researchers at Group-IB discovered scammers approaching patrons via Fb teams and Market listings whereas a separate set of fraudulent web sites impersonated Ticketmaster, AXS, Dion’s official web site, and the live performance venue. Each strategies use acquainted manufacturers and companies to make the acquisition seem reliable.
Inside Fb fan communities, sellers construct belief via personal messages and voice recordings earlier than introducing strain. One recurring script tells the client that quite a few different followers have an interest and that the ticket may promote inside minutes. Group-IB additionally discovered profiles with modified show names whereas the unique id remained seen within the Fb URL.
As soon as a purchaser agrees to proceed, the vendor requests a direct financial institution switch outdoors the official resale service. The recipient’s checking account identify could differ from the id proven on Fb, however victims are advised that Ticketmaster will deal with supply after cost.
Scammers Ship the Identical Ticket to A number of Patrons
Victims obtain a real Ticketmaster switch hyperlink containing a digital ticket and entry code, which can seem usually of their account. In accordance with Group-IB’s technical evaluation, scammers ship the identical ticket and entry code to a number of patrons. Solely the primary individual whose code is scanned can enter the venue, whereas each later purchaser is refused entry.
For context, a single-use ticket works for the primary individual whose code is scanned, leaving each later purchaser with an invalid entry code. The vendor can then deactivate the Fb profile and finish communication with the victims.
Different patrons are directed to convincing web sites constructed to resemble official ticket outlets. Group-IB documented greater than 20 area entries utilizing names related to Céline Dion, Ticketmaster, AXS and Paris La Défense Area. A few of these domains noticed by researchers embrace:
Ticketmaster-celinedion.comAccount.ticketmaster-celinedion.fr
and a number of other others.
Moreover, scammers use Shopify to construct faux ticket shops with acquainted account, checkout and cost pages, making the websites seem reliable. Researchers discovered Shopify-specific paths resembling /cdn/store/recordsdata/ and /merchandise/, together with picture parameters, buyer account pages, OAuth consumer identifiers and devoted cost subdomains. Some pages additionally displayed bank card kinds, supply particulars and pretend Trustpilot rankings.
A number of technical similarities related the domains to a reusable phishing package. OAuth state values on a number of account pages started with the identical hWNA prefix, whereas the websites reused related authentication flows and Shopify elements. Group-IB stated the repeated prefix appeared to return from the identical low-entropy string generator.
Purchase Tickets from Official Websites
Shopping for via hyperlinks posted by unknown sellers provides fraudsters management of each the cost technique and the knowledge proven to the client. Followers ought to start from Dion’s official live performance web page or a licensed distributor resembling Ticketmaster, AXS or Fnac, reject requests for direct financial institution transfers and test that the vendor’s id matches the cost account. Anybody who has already paid a suspected scammer ought to contact their financial institution instantly.
