Over 13,000 FIFA World Cup Domains Registered; 1 in 41 Flagged as Malicious or Suspicious

More than 13,000 FIFA-themed domains were registered between January and May 2026, and by early May about one in 41 were flagged as suspicious or malicious before any matches began.

The United States, Canada, and Mexico will cohost 104 matches across 16 cities, creating an unprecedented cybercriminal opportunity.

FIFA expects over 6 million fans in stadiums, while more than 150 million tickets were requested in the first 15 days, making demand about 30 times higher than prior tournaments.

Phishing has been the most prevalent online scam for more than a decade, and spear phishing uses gathered online information to craft convincing messages for targeted victims.