How to Stay Safe from Football Tournament Scams Before and During the 2026 Event

As the 2026 World Cup approaches, this advisory warns of a surge in event-themed cyber scams—fake tickets, travel and visa phishing, fraudulent suppliers, illegitimate streaming and malicious apps, QR-code lures, and AI-enhanced social engineering—that can impact both individual fans and organizations (including credential theft, compromised Microsoft 365 accounts, business email compromise, financial fraud, and malware). It recommends strengthening email security, implementing DMARC, pre-event employee training, finance/vendor verification controls, endpoint/web filtering, and incident response steps (bank notification, password/MFA changes, evidence preservation, and device scanning) to reduce risk and respond to exposure.