TRM Labs has detected World Cup-linked crypto scams already in operation, highlighting how attackers move funds through on-chain flows.