The global release of Demon Slayer: Kimetsu no Yaiba – Infinity Castle has not only attracted massive fan attention but also the unwanted focus of cybercriminals. According to new research from Kaspersky, the film’s debut has triggered a wave of online scams designed to steal users’ personal and financial information under the guise of offering free access to the movie.
Kaspersky experts have identified fake streaming websites in multiple languages, indicating a coordinated campaign targeting Demon Slayer fans worldwide. The scams typically use legitimate-looking domains and familiar branding to trick users into believing they are accessing an official streaming platform.

Once on these sites, visitors are shown a fake video player that promises free access to the film in their native language. When they attempt to play the video, they are prompted to register, entering personal information such as their email address, mobile number, and password. In many cases, the next steps request banking or card details under the pretext of activating a “free trial.” This tactic exposes users to credential theft, phishing, and potential financial loss—especially if they reuse passwords across different accounts.
“We’ve seen that cybercriminals often try to profit from high-profile premieres like Demon Slayer, exploiting the enthusiasm of large fan communities,” said Olga Altukhova, Senior Web Content Analyst at Kaspersky. “We strongly encourage users to access content only through official platforms to protect their personal data and avoid financial harm.”

Kaspersky recommends several measures to help fans and internet users avoid falling victim to similar scams:
- Verify the authenticity of websites before entering personal data, paying close attention to URL formats and company name spellings.
- Stream or download content exclusively from official, reputable platforms.
- Use reliable security software capable of detecting phishing and malicious attachments. Independent tests by AV-Comparatives rated Kaspersky Premium’s anti-phishing detection at 93% accuracy with zero false positives in both 2024 and 2025.
- Enable multi-factor authentication (2FA) on critical accounts such as email, Apple ID, and financial apps, and monitor account statements for any unauthorized activity.
As major entertainment releases increasingly attract online fraud, Kaspersky’s findings serve as a reminder that digital vigilance is as important as cybersecurity tools. Fans eager to watch Demon Slayer: Infinity Castle should steer clear of unofficial “free movie” links and stick to verified distribution channels to ensure their information stays secure.

