Persistent cybercrime, social engineering, and infrastructure threats continue to plague the FIFA 2026 World Cup across the US, Canada, and Mexico.

June 24, 2026

The 2026 FIFA World Cup is ongoing, and a wide range of threat actors are targeting those participating in and attending the event.

The World Cup, which runs until July 19, presents a complex threat landscape across US, Canada, and Mexico, with attendees representing 48 different nationalities. These factors create opportunities for threat actors, both financial as well as nation-state actors looking for espionage opportunities.

Flashpoint on June 22 published research covering the current state of threats targeting FIFA's event and various factors playing into how those threats target victims. Flashpoint analysts called the threat environment dynamic, "spanning physical security, civil unrest, cyber threats, and geopolitical developments."