Céline Dion is scheduled for 16 Paris concerts in 2026, from September 12 to October 17. Including the 10 additional shows announced for May 2027, the total is 26 concerts. This makes it a lucrative target for scammers.
Fans searching Facebook for tickets to Céline Dion’s 2026 Paris concerts are being targeted by scammers who can place a valid digital ticket in a buyer’s Ticketmaster account and still leave them unable to enter the venue.
Demand for tickets has remained high since Dion announced her return to live performances. Her Paris engagement includes 16 concerts at Plénitude Arena, formerly Paris La Défense Arena, between September 12 and October 17, 2026.
Scammers Selling Fake Concert Tickets on Facebook
The official presale began in April, but fraudulent offers had already appeared before ticket sales opened. Céline Dion’s official website confirms the concert schedule.
However, cybersecurity researchers at Group-IB found scammers approaching buyers through Facebook groups and Marketplace listings while a separate set of fraudulent websites impersonated Ticketmaster, AXS, Dion’s official website, and the concert venue. Both methods use familiar brands and services to make the purchase appear legitimate.
Inside Facebook fan communities, sellers build trust through private messages and voice recordings before introducing pressure. One recurring script tells the buyer that numerous other fans are interested and that the ticket could sell within minutes. Group-IB also found profiles with modified display names while the original identity remained visible in the Facebook URL.
Once a buyer agrees to proceed, the seller requests a direct bank transfer outside the official resale service. The recipient’s bank account name may differ from the identity shown on Facebook, but victims are told that Ticketmaster will handle delivery after payment.
Scammers Send the Same Ticket to Multiple Buyers
Victims receive a genuine Ticketmaster transfer link containing a digital ticket and entry code, which may appear normally in their account. According to Group-IB’s technical analysis, scammers send the same ticket and entry code to multiple buyers. Only the first person whose code is scanned can enter the venue, while every later buyer is refused entry.
For context, a single-use ticket works for the first person whose code is scanned, leaving every later buyer with an invalid entry code. The seller can then deactivate the Facebook profile and end communication with the victims.
Other buyers are directed to convincing websites built to resemble official ticket shops. Group-IB documented more than 20 domain entries using names associated with Céline Dion, Ticketmaster, AXS and Paris La Défense Arena. Some of these domains spotted by researchers include:
Ticketmaster-celinedion.comAccount.ticketmaster-celinedion.fr
and several others.
Additionally, scammers use Shopify to build fake ticket stores with familiar account, checkout and payment pages, making the sites appear legitimate. Researchers found Shopify-specific paths such as /cdn/shop/files/ and /products/, along with image parameters, customer account pages, OAuth client identifiers and dedicated payment subdomains. Some pages also displayed credit card forms, delivery details and fake Trustpilot ratings.
Several technical similarities connected the domains to a reusable phishing kit. OAuth state values on multiple account pages began with the same hWNA prefix, while the sites reused similar authentication flows and Shopify components. Group-IB said the repeated prefix appeared to come from the same low-entropy string generator.
Buy Tickets from Official Sites
Buying through links posted by unknown sellers gives fraudsters control of both the payment method and the information shown to the buyer. Fans should begin from Dion’s official concert page or an authorized distributor such as Ticketmaster, AXS or Fnac, reject requests for direct bank transfers and check that the seller’s identity matches the payment account. Anyone who has already paid a suspected scammer should contact their bank immediately.
