CANADA, Mexico, and the United States have become the epicentre of global football passion as they host the FIFA World Cup 2026. While teams fine-tune their game plans and fans eagerly anticipate each match, another fast-paced and relentless contest is already under way behind the scenes — the cybersecurity match.

An event of this magnitude represents a golden opportunity for cybercriminals. Just as players dream of reaching the final, threat actors see major global events as prime opportunities to achieve their own objectives. As the region welcomes millions of visitors and unprecedented levels of digital activity, technological innovation and fraud prevention have never been more important.

When we think about the World Cup, we naturally think about goals, celebrations, tourism, and national pride. From a cybersecurity perspective, however, the tournament represents an enormous concentration of valuable data. Every fan attending or viewing a match will likely carry a mobile device, access online services, make electronic payments, and connect to public Wi-Fi networks. While this hyperconnectivity showcases the best of modern technology, it also significantly expands the potential attack surface for cybercriminals seeking to exploit unsuspecting users through scams and fraud.

Cybercriminals are highly opportunistic and frequently rely on social engineering tactics that manipulate emotions to deceive victims. And what could be more powerful than a football fan’s desire to support their favourite team?

Investing in advanced cybersecurity capabilities is no longer optional — it is essential.

One of the most common threats is seasonal phishing. Fraudulent e-mails, text messages, or WhatsApp communications may offer seemingly unbeatable ticket discounts, exclusive access, or VIP travel packages.

Increasingly powered by artificial intelligence, these messages are becoming more difficult to detect. They are often professionally written and designed using logos and branding that closely resemble legitimate organisations. Their goal is simple: convince users to click a malicious link and surrender personal information, login credentials, or financial details.

We are also likely to see a surge in streaming-related scams. Fans who are unable to attend matches in person will be searching for ways to watch games online, creating opportunities for cybercriminals to promote fake streaming platforms. These websites may promise free access to matches in exchange for downloading software or entering credit card details for “verification” purposes. In many cases, users unknowingly install malware that can compromise their devices or steal sensitive information.

For businesses, the World Cup presents tremendous commercial opportunities, but it also brings significant responsibility. From hotel chains and transportation providers to small businesses accepting digital payments, every organisation forms part of a larger ecosystem supporting visitors and consumers. If a business suffers a cyberattack during the tournament, the consequences extend beyond financial losses and data breaches. The resulting damage to customer trust and brand reputation can have lasting effects.

In this environment, investing in advanced cybersecurity capabilities is no longer optional — it is essential.

Organisations must recognise that cybercrime has become a highly automated industry, requiring equally sophisticated defensive measures. This includes leveraging artificial intelligence and unified cloud-based security systems for threat detection and response, ensuring integrated protection across networks, endpoints, cloud environments, and mobile devices used by remote employees.

Investments in technology and cybersecurity made during this period will deliver benefits that extend well beyond the tournament itself. Stronger digital resilience will help create a more secure and robust digital ecosystem, support long-term economic growth, and continue to attract investment long after the final whistle has blown.

Arturo Torres is director of threat intelligence for Fortinet’s FortiGuard Labs of Latin America and the Caribbean.

Arturo Torres