Cybercriminals Are Targeting the FIFA World Cup 2026

June 4, 2026 · Fortinet Threat Research · Severity: HIGH

Fortinet’s FortiGuard Labs has identified a surge in cybercriminal activity targeting the FIFA World Cup 2026. Attackers are leveraging phishing campaigns, fake ticket sales, malware distribution, impersonation schemes, and credential theft to exploit the global excitement surrounding the event. These tactics aim to deceive fans, steal sensitive information, and financially defraud individuals seeking to attend or follow the tournament. The scams often involve fraudulent websites and emails designed to appear legitimate, tricking users into providing personal data or purchasing non-existent tickets. The primary targets are football fans, event organizers, and businesses associated with the World Cup. The attacks pose significant risks, including financial losses, identity theft, and compromised personal or organizational data. This activity highlights the broader trend of cybercriminals capitalizing on high-profile events to maximize their reach and impact. Fortinet emphasizes the importance of vigilance, recommending that users verify sources, avoid suspicious links, and employ robust cybersecurity measures to mitigate these threats. The findings underscore the ongoing need for awareness and proactive defense against evolving cyber threats during major global events.

FortiGuard Labs research shows how cybercriminals are exploiting the demand for the FIFA World Cup 2026 through phishing, fake tickets, malware, impersonation, and credential theft.