Cyber‑attack fears grow for 2026 World Cup as experts issue ‘major’ warning to travelling fans

The 2026 World Cup could become the biggest target for cyber attacks in sporting history, according to security experts monitoring threats ahead of the tournament.

With the competition spread across the United States, Canada and Mexico, and expected to attract millions of travelling supporters, experts believe cyber criminals and hacktivist groups will see the event as a huge opportunity for scams, disruption and fraud.

2026 World Cup could face biggest cyber attack surge ever

Cyber security specialists have sent a ‘major' warning that the scale, visibility and digital reliance of the tournament make it uniquely vulnerable to attacks.

Matt Hull of cyber security company NCC Group said, via CityAM, prominent sporting events naturally attract cyber criminals because fans are often emotionally invested and more likely to react quickly to messages involving tickets, travel or urgent tournament updates.

Among the biggest concerns are phishing scams, fake FIFA communications, fraudulent ticket offers, payment scams and attempts to steal passwords or account information through fake websites and emails.

Experts also warned about potential distributed denial-of-service (DDoS) attacks and website disruptions during high-profile moments of the tournament.

The concerns come after officials reportedly uncovered a plot targeting the upcoming Winter Olympics in Milan, while previous Olympic Games have also suffered major cyber attacks.

The growing use of artificial intelligence is also increasing fears, with recent threat reports showing a sharp rise in AI-assisted cyber activity.

Security experts stressed that not all threats are state-backed, with many expected to come from opportunistic criminal groups targeting supporters travelling to matches and using unfamiliar booking systems, apps and public Wi-Fi networks during the tournament.

FGG says: Fans heading to World Cup need to treat digital security seriously

With supporters already facing huge costs around tickets, flights and accommodation, the last thing anyone needs is to lose money or access to accounts through scams linked to the 2026 World Cup.

Fans should be extremely cautious about emails, links and social media messages claiming to be from FIFA, resale platforms or travel providers, especially if they create urgency or ask for login details. Double-checking website addresses and only using official platforms will be crucial.

Using strong passwords and enabling two-factor authentication on email accounts, ticketing apps, banking apps and phones also feels essential ahead of a tournament where supporters will be relying heavily on digital access while travelling internationally.