Cybersecurity in football is still the Wild West
Between email hacking, contract leaks, and identity theft, professional football has a cybersecurity problem it refuses to acknowledge.
A wealthy industry with poor defences
Professional football generates billions but spends a fraction of what other industries invest in IT security. Most top-flight clubs do not have a dedicated cybersecurity officer. Agents manage everything from their personal phones. Lawyers use unencrypted email. It is a paradise for hackers, and they know it.
The most common attacks
Phishing is still the number one threat. An email that looks like it comes from FIFA, the federation, or a partner club. You click, enter your credentials, and it is over. Next comes impersonation: someone takes control of your inbox and sends messages in your name. In the context of a transfer negotiation, this can cost hundreds of thousands of euros. We have documented half a dozen cases from last year alone.
Why football is an easy target
Three reasons. One, there is a lot of money involved. Two, decisions are made quickly, often under time pressure, which reduces vigilance. Three, a culture of secrecy prevents victims from speaking up. When a club gets scammed, they do not publicise it. When an agent gets hacked, they handle it internally. The result is that nobody learns from anyone else's mistakes.
Basic measures nobody follows
Two-factor authentication. Unique passwords. Not opening attachments from strangers. Not sending contracts by email without encryption. It sounds obvious. It is. And yet a majority of football professionals do not follow these basic rules. It is not negligence. It is a lack of training and digital culture in the industry.
What FOOTPASS does about it
Every message on FOOTPASS is end-to-end encrypted. Every identity is verified. Every document is stored in a digital vault. It is not a silver bullet, it will not protect against phishing on your personal email, but it creates a space where negotiations are protected by default. If your most sensitive conversations happen in a secure environment, the overall risk drops significantly.
Discover FOOTPASS
Authenticated messaging, verified Pass ID, digital authorizations, encrypted vault. Join 1,200+ football members.
Download FOOTPASS
