Presale Code Phishing Scam

A presale code phishing scam targets the exclusive early-access codes that artists, promoters, or fan clubs distribute to give loyal fans a head start on ticket sales before general public release. Scammers phish for these codes through fake sign-up forms, fraudulent fan club emails, or social engineering aimed at fan club members, then either use the codes themselves to buy tickets for resale at a markup, or resell the codes directly to other fans who don't realize a code can be, or already has been, shared beyond its intended single use.

This scam sits at the intersection of ticket fraud and general phishing, since the harm isn't always a direct financial loss to the phished fan — sometimes it's the loss of their presale opportunity itself, while the financial victims are downstream buyers who purchase a resold or already-used code believing it will grant them presale access.

Because presale codes are often distributed by email or through fan club membership portals, phishing pages mimicking these legitimate distribution channels can be highly convincing to fans eager not to miss the early access window.

Ahead of an anticipated presale, scammers send phishing emails or create fake sign-up pages impersonating an artist's official fan club or a ticketing platform's presale registration process, asking fans to 'confirm their details' or 'verify eligibility' in order to receive a code. These pages harvest email addresses, sometimes payment information, and any personal details submitted, while sometimes also handing back a fake or non-functional code as a distraction.

In a related version, scammers acquire genuine presale codes — through fan club membership, previous purchases, or their own phishing of real fans — and then sell access to these codes on secondary marketplaces or social media, promising buyers early access before the general public sale opens. Because presale codes are usually intended for one-time or limited use, a resold code may already be used by the time a buyer tries it, or may work but only for a single ticket when multiple were promised.

Buyers who pay for a resold presale code and find it doesn't work when the presale window opens have no recourse, since the transaction happened entirely outside any official channel, and the presale window itself is often only open for a short, non-repeatable period.

The exclusivity and time-limited nature of presale access creates strong urgency among devoted fans, who are often willing to pay a premium or hand over personal details quickly rather than risk missing the presale window entirely. Genuine fan clubs and ticketing platforms do legitimately distribute codes by email, which makes a well-crafted phishing email hard to distinguish from the real thing, especially when fans are anxiously checking their inbox in the days before a presale.

The scarcity of codes themselves — often limited to fan club members or those who pre-registered — also creates a secondary market dynamic where fans who missed out on a legitimate code are more willing to trust an unofficial seller than they might be for a regular resale ticket, simply because there's no other way to access the presale at all.

Ahead of a major tour's presale, a fan receives an email that closely resembles the artist's official fan club, asking them to 'verify their account' by entering their login details on a linked page to receive their presale code. The page is a phishing site that captures the fan's credentials. Separately, another fan buys a 'guaranteed' presale code from a social media seller, only to find the code has already been used when the presale window opens, with the seller unreachable and no way to access the sale through any other means.

Verify your fan club account now to receive your exclusive presale code.

Your presale code is ready — click here and enter your details to unlock it.

Selling a guaranteed presale code, works for up to 4 tickets, pay now to receive it.

Limited codes remaining, register your payment details to confirm your presale spot.

Only register for presale access through the artist's or venue's official website or verified fan club platform, navigating there directly rather than clicking links in unsolicited emails. If a presale code arrives by email, verify the sender's domain carefully and cross-check any request for personal or payment details against what the fan club's official terms actually require, since legitimate presale registration rarely asks for sensitive payment information just to receive a code.

If considering buying a presale code from a secondary seller, understand that most codes are intended for single or limited use and cannot be verified as unused before the presale window opens, making this purchase inherently high-risk regardless of how legitimate the code appears.