Fraud, Ransomware, and Fake Apps Are Already Targeting FIFA 2026

Threat actors are deploying crypto scams, card-not-present fraud, and lookalike hotel and travel domains targeting FIFA World Cup 2026, with accommodation brands representing 56% of impersonation activity and over 35 fake sportsbook apps published on Google Play. More than one-third of official FIFA World Cup 2026 partners lack sufficient DMARC enforcement to prevent domain spoofing. Check Point researchers warn that threat infrastructure is already live and positioned ahead of the tournament’s June 11, 2026 opening.