How to spot a fake ticket: seven checks before you send the money

Every large concert in Almaty or Astana ends the same way. Official sales close, and under the poster appear people with "two tickets in the stalls, selling at cost". Some of them are ordinary people whose plans changed. Some are running a scheme that is over fifteen years old. It barely changes, because it still works.

Below: how the scheme works technically, the seven things worth checking before you transfer money, and what a ticket written to a blockchain changes about the picture.

Why forgery is possible at all

An ordinary e-ticket is a PDF with a picture of a QR code. The file can be forwarded a hundred times and all hundred copies look identical: same typeface, same logo, same code. The file has no "originality" — there is only a row in the organiser database saying that a code with this number has been sold and not yet redeemed.

At the door a steward scans the code, the system voids it, and the same code will not pass twice. That is why the fraud is almost always the same: sell one file to several people and disappear before doors open. The first arrival walks in and never learns anything was wrong. The rest stand at the turnstile hearing "this ticket has already been used".

The seller risks close to nothing. A card-to-card transfer leaves no contract, the phone number is registered to someone else, and a social profile is deleted in under a minute.

Five scenarios that keep repeating

• One file, five buyers. The most common one. You receive a genuine, legally purchased ticket. So do four other people.
• The direct-message "hold". A prepayment is requested to "reserve the seat", the ticket promised "the day before". The day before, the account is gone.
• A cloned sales site. The domain differs by one letter or one zone: not .kz but .site or .online. The design is copied wholesale, the payment goes to a personal card.
• Swapped payment details. A third account with a near-identical handle joins the thread with a genuine seller and sends "the corrected card number".
• A ticket in someone else’s name. For named events the ticket is checked together with an ID. A resold ticket is useless at the door even when it is authentic.

Seven checks before the transfer

1. Open the official listing of the venue or organiser. Confirm the event exists on that date, and that the asking price is not more than a third below the official one. An abnormally cheap ticket is not luck, it is bait.
2. Read the domain character by character. Real Kazakhstani venues live on .kz and do not move to a free domain a week before a concert.
3. Ask for the original PDF and the payment receipt rather than a screenshot: the receipt shows the purchase date and the last four digits of the card. A fraudster will refuse, because the receipt is tied to a real transaction of theirs.
4. Ask for the order number and try to verify it on the site where the ticket was bought. If the venue publishes a ticket-status page, this takes thirty seconds.
5. Check whether the ticket is personalised. If it carries a full name, buying it second-hand is pointless.
6. Pay in a way that leaves a trail: a transfer with a reference, or better, the official resale route if the organiser enabled one. Cash at the door leaves nothing at all.
7. Look at the seller account: registration date, posting history, tags from other people. An empty profile created this month is the answer.

Why a screenshot proves nothing

A screenshot of a QR code is an image. It carries no signature, no binding to an owner and no marker saying the code is unused. To the access-control system, showing a screenshot and showing the original are the same action, and the difference between them is decided only by who reached the turnstile first. We unpacked that mechanism in how QR entry works.

What an NFT ticket changes

A ticket issued as a non-fungible token is not a picture but an entry in a public ledger. It has an owner address, a transfer history and a status. Copying the image achieves nothing: authenticity is confirmed by the ledger, not the file.

• There is one owner, and they are visible. You can check who holds the ticket right now before the deal, not at the door.
• History cannot be rewritten. You can see the ticket was minted by the organiser rather than appearing from nowhere.
• Redemption is recorded in the ledger. A used ticket becomes used for everyone at once.
• The organiser sets the resale rules. They can allow transfer, cap the price or forbid it — and the rule is enforced technically, not verbally.

We explained what an NFT ticket is without the crypto jargon in a separate piece. In short: the technology does not make you a participant in a currency market, it moves proof of ownership out of somebody else’s database and into an open ledger.

If the money is already gone

1. Preserve everything: the full conversation, the recipient card or account number, the time of the transfer, screenshots of the listing and the profile.
2. Contact the bank whose card you paid from and ask about disputing the transaction. The sooner, the better the odds.
3. File a police report — online through e-government services or at the nearest station. Without a report the bank can do very little.
4. Write to the venue whose ticket you were sold. The organiser can void the code and, more importantly, warn other buyers.