What the Numbers Say About FIFA 2026 Cyber Risk

Check Point reports that threat actors pre-positioned a coordinated fraud and phishing infrastructure for the FIFA World Cup 2026 months in advance: over one-third of official partners lack DMARC protection enabling email impersonation; fake sportsbook apps spiked (64 detections vs zero baseline) primarily on Google Play alongside Telegram-based affiliate scams; and numerous lookalike travel and hotel domains (many with MX records) were registered ahead of kickoff to intercept purchases and account resets. The activity spans financial services, transportation, hospitality, and gambling, is multi-language, and represents elevated fraud and brand-impersonation risk for organizations in those sectors.