A sold-out concert ticket from social media: a screenshot proves nothing

The event is sold out, so you publish a short post: “looking for two tickets”. A reply arrives almost immediately. The seller can no longer attend, shows you an order confirmation and offers a small discount if you pay by bank transfer now.

The strongest argument is not the document but the fear that somebody else will take the opportunity. In 2025, Polish police described a case involving 60 fraudulent ticket offers. Buyers received nothing after paying, while identical adverts returned under different names.

What can be fake?

A ticket that never existed is only one possibility. You may receive a convincing file that was cancelled, sold to several people or cannot be transferred under the organiser’s rules. A ticket image, QR code and purchase receipt can all be copied; they show what the material looks like, not that you have a valid right to enter.

Europol defines ticket fraud as the sale of tickets that fail to arrive or turn out to be fake or stolen. Warning signs include tickets for an event that is sold out or has not officially gone on sale, and a message or social-media offer that sends the buyer to an unfamiliar site.

The safest resale route

Begin with the organiser and original ticket company’s websites. Look for the resale platform or official transfer feature they name. Not every ticket is transferable, and a ticket holder’s name, changing code or event terms may matter.

If the organiser offers no protected resale process, risk increases. An old profile with photographs and mutual friends is not protection—the account may have been compromised. A photograph of the seller’s identity document is no guarantee either and may belong to another victim.

Avoid a direct bank transfer to a stranger. If the platform provides buyer protection and an in-system transfer, stay inside that process. Do not follow a “faster” link sent in chat, and do not pay later charges for a name change, insurance or code release.

Three questions before buying

1. Does the organiser allow this particular ticket category to be transferred?
2. Will both transfer and payment happen through a channel named by the organiser?
3. If the ticket is invalid, is there a genuine dispute and refund process?

If any answer is “I do not know”, a lower price does not replace the missing protection. Meeting a seller in person does not solve the problem of a copyable code that may admit only the first person at the gate.

If the ticket never arrived or did not work

Preserve the advert, profile, complete conversation, files, website address, bank details and payment confirmation. Report the account to the platform and the matter to the police. Ask your bank or payment provider immediately whether the transaction can be stopped or disputed.

If a link led to a login or payment page and you entered information there, contact the bank, block the card, change the exposed password on the official site and close unfamiliar sessions. A missing ticket may be only the first visible consequence.

Source facts and Breachroad’s conclusion

The ticket-fraud definition and principal warning signs come from Europol and police guidance. Copyable-file risk, the three questions and the preference for official transfer tools are Breachroad recommendations; the organiser remains the source of truth for a particular event.

The key lesson is that you are not buying a file with a code—you are buying admission and protection if something goes wrong. Our safer online-shopping guide covers the broader payment rules. Cybersecurity training for employees shows how scarcity pressure can override caution in workplace decisions too.