TL;DR. Almost every ticket scam is one of four patterns: a fake seller in a fan group, a real ticket sold several times over as a screenshot, a lookalike resale site, or a phishing message that harvests your account. Each one has a specific check that defeats it, and one rule protects you across all of them: pay by a method with recourse, on a channel the event itself names, and never move money by bank transfer to someone you found in a comment section.
Why scams cluster around sold-out shows
Ticket fraud is not background noise; it follows demand. The moment a run sells out, three things become true at once: fans want a ticket more than they want to be careful, the legitimate supply drops to a trickle of returns, and "I have a spare" becomes a believable thing for a stranger to say. Scammers do not need to be sophisticated in that environment. They need a profile photo, a screenshot, and your urgency.
The defence is not cleverness either. It is knowing the four patterns, because nearly everything you will encounter is one of them wearing different clothes.
Pattern one: the fan-group seller
The post appears in a Facebook group, a WhatsApp community or a comment thread: a friend has dropped out, face value only, first to message gets them. The profile looks real because hijacked accounts and aged fakes are cheap. The price is face value precisely because too-good-to-be-true prices scare people off - honest-looking pricing is part of the costume.
The checks: a seller you found this way is unverifiable, so shift the risk onto mechanisms instead. Insist on the platform's official transfer (more on that below), and pay only by a method with recourse. A refusal on either point is your answer. Note that the same post appearing in several groups, or a profile created recently with no history in the community, settles it faster.
Pattern two: the screenshot ticket
A PDF or a screenshot of a ticket is a picture, not a ticket. The barcode may already have been refunded, transferred onwards, or sold to five other people, and the first one through the gate wins while the rest find out at the scanner. This is why major venues have moved to app-based tickets: AXS Mobile ID and Ticketmaster's transfer system exist so that ownership moves inside the platform, the barcode reissues, and a forwarded image is worthless.
The check: a legitimate spare moves through the platform's own transfer flow, arriving in your account, in your name. Anyone offering a PDF "because transfer isn't working" for an event whose venue uses mobile ticketing is describing the scam to you.
Pattern three: the lookalike resale site
These are real websites with checkout flows, support pages and sometimes paid search ads - built to look like an official resale channel or a plausible marketplace. Some take your money for tickets that never existed; the worst also keep the card details. What they can never do is appear in the event's own terms, which is why the authoritative check is boring: the event's terms and the venue's site name the sanctioned channels. We keep a plain-English rundown of the UK's genuinely capped channels in the face-value guide and the Twickets safety explainer.
The checks: reach resale through the event page or by typing the known URL, never through a link in a message or a social ad. Read the domain character by character; lookalikes rely on you skimming. If a site is not named by the event or venue, the professionalism of its design is evidence of nothing.
Pattern four: the phishing message
"Your tickets are at risk", "confirm your account to keep your place", "there's an issue with your payment" - a message engineered to make you log in through its link. The target is your ticketing account itself: with your login, a scammer transfers your real tickets out and sells them on. These messages spike before big on-sales and before event days, when a security warning feels plausible.
The check: never log in through a link that arrived in a message. Open the app, or type the site. Turn on two-factor authentication where the platform offers it, and use a password that is not reused from anywhere else.
The payment rule that survives your own mistakes
Every check above can fail on a convincing day. The payment method is the layer that protects you anyway, so treat it as non-negotiable:
- Card, or PayPal Goods and Services: disputes and chargebacks exist, and UK credit cards add Section 75 protection on purchases over £100.
- Platforms that hold payment until the ticket transfers: this is how the capped resale channels work, and it removes the "paid, then blocked" ending entirely.
- Never bank transfer, and never PayPal Friends and Family: both send money with no recourse, which is exactly why scammers steer you to them. The steer itself is the red flag.
If it has already happened
Move fast and in this order. Call your bank: card payments can be disputed, and for transfers many UK banks operate under a reimbursement scheme for authorised push payment fraud, where reporting quickly matters. Report to Action Fraud (Police Scotland if you are in Scotland) - it feeds the intelligence that gets accounts and sites taken down. Report the profile or listing to the platform you found it on. Then let go of the ticket; the recoverable thing is the money.
The honest way out of the desperation trap
Scams work because waiting for a legitimate return feels passive and a stranger's spare feels like action. But returns to official, capped channels are real and continuous - people's plans break every day, and those tickets come back at face value with the platform handling payment and transfer properly. The problem with the legitimate route was never that it does not work; it is that listings vanish in minutes and nobody can watch a page all day. That timing problem is solvable: Alertix watches official resale channels around the clock and sends a push notification the moment a matching ticket appears, linked straight to the listing. Buying safely and buying fast stop being a trade-off, which removes the exact pressure the scams are built on.