As baseball’s postseason heats up, fans are facing a growing scam: tickets vanishing from the MLB Ballpark app, stolen and resold by fraudsters. This surge began around Labor Day, leaving ticket holders stranded at stadium gates.
Reports from venues like Fenway, Wrigley, and Nationals Park detail accounts hacked, with tickets forwarded to scammers and flipped on sites like SeatGeek or StubHub. MLB confirmed to The Athletic that “bad actors” are using stolen credentials from other breaches to access accounts. Fans like Red Sox holder Nancy Morrisroe expressed vulnerability after her tickets were forwarded without consent.
Social media and forums, including X and Reddit’s r/baseball, are rife with stories: a Cubs fan battled support for days to recover tickets, while Phillies supporters report similar thefts. MLB notes the issue isn’t an app breach but credential stuffing attacks.
How It Unfolds
- Credential Theft: Passwords harvested via phishing or unrelated data leaks.
- Account Access: Scammers log in and forward tickets to dummy accounts.
- Quick Resale: Tickets hit secondary markets before owners notice.
- Fan Fallout: Empty app wallets lead to gate denials and refund chases.
A nationwide app crash on August 31 exacerbated frustrations, causing long lines.
The league apologized, stating they’re restoring accounts and resetting passwords. Teams like the Cubs emailed warnings, but broader alerts have been limited. MLB declined to share incident numbers.
Protection Tips
- Enable 2FA in app settings.
- Use unique, strong passwords.
- Monitor your ticket wallet regularly.
- Forward only to trusted contacts.
- Contact support immediately if compromised.
This highlights digital ticketing risks. MLB needs stronger security like mandatory 2FA to restore trust. Stay vigilant—don’t let scammers spoil your game day.
