World Cup Security – a factual security briefing for British travellers: host city risk profiles, threat categories, entry requirements and close protection considerations across the United States, Mexico and Canada.
The 2026 FIFA World Cup runs from 11 June to 19 July. It is held across sixteen cities in the United States, Canada and Mexico. This is the largest tournament in the competition’s history, featuring forty-eight teams and one hundred and four matches. An estimated seven million people will attend in person. Millions more will gather in official FIFA Fan Festivals throughout the three host nations. (FIFA World Cup 2026™ ticket demand breaks all records, 2025)
Security is layered. At the national level, the FBI, the Department of Homeland Security, the RCMP and the SEDENA of Mexico coordinate multi-agency task forces. On the city level, metropolitan police and emergency services operate dedicated tournament commanders. FIFA uses its own security procedures at venues. Private providers address gaps between these structures.
The principal risks to attendees are opportunistic crime, lone-actor terrorism, civil unrest, cyber-targeted fraud, severe weather disruption and cross-border logistical complexity. Risk varies sharply by host city. There is no single “World Cup risk profile.” It must be read city by city.
This is the first World Cup held across three nations with robust protections for freedom of expression. The protest and activism risk profile differs from Russia 2018 and Qatar 2022. The 2025 FIFA Club World Cup, held in the same June–July window at US venues, was a test event. Excessive heat forced water breaks during some matches. Six out of sixty-three matches were stopped for lightning, with delays ranging from forty-six minutes to nearly two hours. (Poole, 2025) The 2026 tournament will be larger in every respect, with less flexibility for delays or rescheduling.
The convergence of political tensions, a US midterm election cycle and the weaponisation of technology means short-term crises can multiply rapidly. Misinformation targeting event sponsors and service providers is an assessed risk.
Forty-eight teams are divided into twelve groups of four. The top two from each group, plus eight third-place finishers, advance to a thirty-two-team knockout round. The knockout stage proceeds through the Round of 32, the Round of 16, the quarter-finals, the semi-finals, a third-place match, and the final. The tournament opens at Estadio Azteca in Mexico City. The final will be at MetLife Stadium in East Rutherford, New Jersey, on 19 July.
| Country | Cities | Matches |
|---|---|---|
| United States | Atlanta, Boston, Dallas, Houston, Kansas City, Los Angeles, Miami, New York/New Jersey, Philadelphia, San Francisco Bay Area, Seattle | 78 |
| Mexico | Guadalajara, Mexico City, Monterrey | 13 |
| Canada | Toronto, Vancouver | 13 |
Matches span four time zones: EDT, CDT, CST and PDT. A fan following England through Group L crosses three time zones in the group stage alone: Croatia in Dallas on 17 June, Ghana in Boston on 23 June, and Panama in New York/New Jersey on 27 June. Scotland’s group fixtures involve a similar pattern: Haiti and Morocco in Boston, and Brazil in Miami.
Knockout-stage venues cannot be confirmed until group play concludes. A team advancing far may need to travel between all three host countries. Cross-border movement between the US, Mexico and Canada requires separate documentation for each nation.
Demand for US visa processing will surge during the tournament period. Business travellers and relocating workers will face long waits for travel documents. Workforce mobility for organisations operating across host cities will be disrupted.
The US hosts seventy-eight matches across eleven metropolitan areas. It is the highest-volume and most politically charged environment of the three host nations.
The US federal government has directed about USD $1 billion to tournament security. This includes USD $625 million through the FIFA World Cup Grant Program and USD $500 million through the Counter-Unmanned Aircraft Systems Grant Program. An additional USD $115 million from the Department of Homeland Security is allocated to counter-drone technologies. (FEMA Unveils $1B in Security Grants for FIFA World Cup and Counter-UAS Security, 2025) A White House Task Force coordinates efforts across the FBI, DHS and FEMA.
Stadiums will have enhanced screening systems, restricted-access zones and rapid-response medical stations. AI-powered crowd-flow monitoring software will be used. Authorities have tested chemical decontamination equipment for both conventional and unconventional threats.
The DHS has issued a high alert warning about terrorism threats linked to Iran. The risk of lone actors increases with widespread civilian gun ownership. Immigration enforcement and protest activities are active political elements, heightened by the US midterm elections.
The US healthcare system is entirely private and insurance-driven. Foreign health insurance policies are almost certainly not accepted at US facilities. Travelling without adequate cover exposes visitors to full uninsured billing rates. Specialist insurer claims data show the average UK medical claim in the United States is £14,600. A fractured leg costs over £280,000. (Cost of a Broken Leg: What It Typically Costs in the U.S., 2026)
The 2024 Copa América final in Miami, where crowds overran security barriers and forced a match delay, has prompted organisers to adopt stricter layered security measures for 2026. Non-ticketholders may be barred from approaching some stadiums entirely.
Mexico hosts 13 matches in Guadalajara, Mexico City and Monterrey. Security operates under Plan Kukulcán, deploying 20,000 additional military personnel and 55,000 police officers across three metro areas. This brings the total security force to around 100,000. The aerial defence component includes more than fifty aircraft and thirty-three monitoring drones. (Poole, 2026)
Mexico City is investing nearly USD $412 million in transportation and safety upgrades. This includes better transit options and USD $32 million for new subway cameras. (Flores, 2025) Stadiums will use face scanning, fingerprint checks, and smart surveillance systems.
Persistent crime is the main concern. Drug trafficking organisations are designated as foreign terrorist organisations by the US government. DTOs may create front companies to secure vendor contracts, which poses legal and compliance risks. They are also expected to profit through counterfeit ticket sales, illegal gambling networks and prostitution rings.
Express kidnapping, virtual kidnapping and conventional kidnap-for-ransom are threats in Mexican cities. Criminal organisations have infiltrated police forces in some areas. AI voice synthesis has made virtual kidnapping operations more efficient and profitable.
Private healthcare in Mexico is generally good. The public healthcare system (IMSS) may refuse service to foreigners without proper ID. Private hospitals usually ask for payment before treatment. Some places might hold your passport until you pay your bill. Do not drink the tap water in Mexico. Dengue fever occurs year-round, but it is most severe from May to November. (Dengue and severe dengue, n.d.)
Canada hosts thirteen matches in Vancouver and Toronto. It presents the lowest overall risk profile of the three host countries, though it is not without considerations.
Canada’s terrorism risk rating increased to Moderate in 2025. (Canada, n.d.) Security visibility at Canadian venues is lower, which opponents could view as an operational advantage. Intelligence sharing with US partners and continuous threat monitoring are central to Canada’s approach.
Protest and activism risks are assessed as lower in Canada than in the US and Mexican metro areas. Current political dynamics are less conducive to nationally organised, high-visibility disruption.
Canada operates a universal public healthcare system, but foreign visitors are not covered. Hospitals in Toronto and Vancouver offer good care, but emergency rooms are known for long wait times. Tap water is safe.
The following risk assessment reflects conditions as of 1 May 2026 and is subject to revision.
| Country | Metro Area | Crime | Terrorism | Civil Unrest | Health | Environment |
|---|---|---|---|---|---|---|
| Canada | Toronto | Low | Moderate | Low | Low | Low |
| Canada | Vancouver | Low | Low | Low | Low | Low |
| Mexico | Guadalajara | Moderate | Low | Low | Low | Moderate |
| Mexico | Mexico City | Moderate | Low | Low | Low | Moderate |
| Mexico | Monterrey | Medium | Low | Low | Low | Low |
| USA | Atlanta | Moderate | Low | Low | Low | Low |
| USA | Boston | Low | Moderate | Low | Low | Low |
| USA | Dallas | Moderate | Low | Low | Low | Moderate |
| USA | Houston | Moderate | Moderate | Low | Low | Moderate |
| USA | Kansas City | Moderate | Low | Low | Low | Moderate |
| USA | Los Angeles | Moderate | Moderate | Moderate | Low | Moderate |
| USA | Miami | Moderate | Moderate | Low | Low | Medium |
| USA | New York/NJ | Moderate | Moderate | Moderate | Low | Low |
| USA | Philadelphia | Moderate | Moderate | Low | Low | Low |
| USA | San Francisco | Moderate | Low | Low | Low | Moderate |
| USA | Seattle | Low | Low | Low | Low | Low |
Kansas City. The highest violent crime rate of all US host metro areas. (Violent crime in KC continues to drop, 2026) Close vetting of accommodation is essential.
Guadalajara. Moderate crime rating with documented nightlife-related drugging risk. Avoid entertainment districts run by unlicensed venues. Avoid outlying areas of Tlaquepaque and Tonalá after dark, as well as the southern and eastern parts of the city.
Monterrey. Medium crime rating. Contested cartel territory. Avoid peripheral municipalities, including Apodaca, Escobedo and García. Do not walk alone in any part of the city after dark.
Los Angeles. Moderate across multiple categories. SoFi Stadium and several Fan Festivals are near higher-crime neighbourhoods. Avoid the following areas: Central City East, South Central, Downtown LA after dark, Venice Beach after dark, Compton, and Inglewood.
Mexico City. Moderate crime rating. Air pollution routinely exceeds recommended thresholds. Avoid Tepito, Doctores, Tlalpan and Iztapalapa.
New York/New Jersey. Hosts the final. The highest concentration of high-profile attendees creates a peak symbolic-target risk.
This is the most common risk for attendees in all 16 cities. Pickpocketing, bag-snatching, theft of unattended items and distraction scams occur frequently near match-day checkpoints, transit hubs and Fan Festivals. Card-cloning incidents have risen in Mexico. (Zepeda, 2025) Use caution with credit or debit cards, including ATMs.
Express kidnapping, virtual kidnapping and conventional kidnap-for-ransom are established threats in Mexico City and Monterrey. Kidnappers range from large, well-organised rings with extensive support networks, including compromised police officers, to low-level operations. Many abductions go unreported. Extortion is common: businesses in Mexico are frequently forced to pay protection fees to DTOs. (Kidnapping in Mexico: News vs. Ground Truth, 2021)
AI adoption by criminal groups is accelerating. Virtual kidnapping is now facilitated by AI voice synthesis, and criminal networks deploy the same technology in social engineering attacks targeting corporate finance functions.
Vehicle theft and break-ins are prevalent in the San Francisco Bay Area. (San Francisco Police Using New Technology to Target Auto Break-Ins, Making Arrests in Hotspot Areas, 2024) Standard precautions apply across all US host cities.
The terrorism threat to the 2026 World Cup comes from two principal vectors: lone actors and Iran-backed networks.
Lone-actor terrorism is the most probable attack modality. The perpetrator profile is an individual acting independently, motivated by a combination of personal grievances and extremist beliefs. Because lone actors operate without organisational infrastructure, they are less visible to intelligence services. The DHS has issued a specific warning regarding potential lone-wolf attacks. The US Office of the Director of National Intelligence assesses that fatwas calling for retaliation against US targets are likely to inspire individuals to conduct attacks.
Iran has a demonstrated pattern of plotting targeted killings on US soil. Over the past five years, US authorities have disrupted more than a dozen Iran-linked plots, including assassination attempts targeting senior officials and political dissidents. (Treasury Designates Iranian Regime Operatives Involved in Assassination Plots in the United States and Abroad, 2023)
The US is also experiencing an increase in targeted attacks by individuals who blame specific companies or institutions for their personal circumstances. In late 2024, a health insurance executive was killed. In 2025, attacks targeted the NFL and the CDC. (Constantino & Fonrouge, 2024) Copycat incidents are assessed as likely in 2026. Large public gatherings are particularly vulnerable to mass casualty events. Political narratives on income inequality, crime, and immigration are likely to be amplified during the World Cup, coinciding with the US midterm election cycle.
In Canada, the probability of a major organised attack is assessed as low. In Mexico, ideological terrorism has no established base; the primary security threat remains cartel violence.
Stadium queues, Fan Festivals and transport hubs are categorised as soft targets across all three nations.
Previous World Cups in Qatar and Russia were hosted by countries with significant capacity to suppress protest activity. The 2026 tournament is held across three nations with strong protections of freedom of expression. US authorities face the challenge of handling large protests across 11 metro areas without the ability to prohibit lawful demonstrations.
Protest and activism risks are assessed as higher in the US and Mexican metro areas than in the Canadian metro areas. Primary drivers include US immigration enforcement (ICE presence at or near venues), foreign policy positions on Palestine and the Iran-Israel conflict, and economic complaints in Mexico.
Pro- and anti-Islamic Republic demonstrations can be expected in Los Angeles, where the Iranian team plays two of its three group-stage matches. Los Angeles is home to the largest Iranian diaspora in the world. (Iranian Population in Los Angeles County, CA by City: 2025 Ranking & Insights, 2025) In Mexico, truckers, farmers and families of missing persons have signalled intent to protest at or near venues.
Recommendation. Avoid all protests and demonstrations, including those that appear peaceful. Law enforcement may establish exclusion zones with limited notice. Pre-arranged private transportation is advisable in all host cities.
The global media profile of the World Cup makes it a major target for state-sponsored criminal and hacktivist cyber actors. The interconnected digital footprint spanning sixteen host metro areas means that an attack in one market could cascade across the entire tournament ecosystem.
State-sponsored actors design operations to disrupt high-profile events by taking payment systems, ticketing infrastructure, transportation networks and broadcast facilities offline. Geopolitically motivated potential attackers include Russia, China, North Korea and Iran.
Hacktivists seek to hijack media attention. Disinformation campaigns, false evacuation reports, fabricated incident claims, and AI-generated deepfakes are likely vectors during high-attendance matches.
Criminal actors are motivated by monetary gain. Ransomware, phishing and fraudulent ticketing operations are the most likely threats. The volume of cyber attacks is expected to exceed previous events, driven by the increased availability of self-directed AI-assisted hacking tools. (2026 CrowdStrike Global Threat Report: AI Accelerates Adversaries and Reshapes the Attack Surface, n.d.).
Narrative-driven threats now move faster than corporate response cycles. AI-enabled misinformation, executive impersonation via deepfakes, and coordinated brand attacks can affect markets, pose physical threats, and erode brand equity. Online and offline risks reinforce each other: polarising narratives drive harassment and protest activity, while physical incidents at venues are captured, edited and remixed into synthetic content that travels faster than the facts.
Recommendations. Use authorised channels for ticket purchases only. Do not connect to unsecured public Wi-Fi; use a VPN when accessing accounts. Activate two-factor authentication (2FA) on all critical accounts, including email, banking and ticketing platforms. Use a password manager to create and store strong, distinct passwords for each service. Update device operating systems and apps before travelling. Treat uncorroborated claims circulating on social media with scepticism until they are confirmed by official channels. Organisations participating in the World Cup should establish incident command structures for information risk.
Extreme weather will shape the 2026 tournament. Between 11 June and 19 July 2025, the same calendar window, thirteen of sixteen host cities recorded temperatures above 30°C. Several locations experienced peaks near 38°C, with heat persisting for multiple days. (Extreme Heat Is Testing FIFA’s Ability To Protect 2026 World Cup Athletes, 2025)
Only four of the sixteen stadiums have retractable roofs and climate-controlled environments: Atlanta (Mercedes-Benz Stadium), Dallas (AT&T Stadium), Houston (NRG Stadium) and Vancouver (BC Place). (NRG Stadium, 2024) Even with this infrastructure, Dallas and Houston could reach dangerous temperatures during afternoon matches. (Heat risk assessments the order of the day for World Cup host cities, 2026)
Lightning protocol in the US suspends play for thirty minutes if a strike is detected within approximately ten kilometres of a stadium. Each additional strike resets the clock. During the 2025 Club World Cup, six matches were suspended due to lightning, with delays of up to 2 hours. (Why Are Matches in the Club World Cup Suspended So Often?, 2025)
The Atlantic hurricane season begins in June. Miami and Houston carry the highest exposure. Kansas City and Dallas sit within “Tornado Alley,” where tornadoes can cause significant damage with limited warning. (Cronkleton, 2025)
In Mexico City, air pollution routinely exceeds recommended thresholds. (Air quality database, 2024) Earthquakes are common and can be severe. Canada’s West Coast, the San Francisco Bay Area and Los Angeles lie within active seismic zones. (Seismic zones in Western Canada, 2018)
Recommendations. Monitor weather forecasts daily. Carry sun protection and hydrate continuously in southern host cities. Familiarise yourself with shelter procedures for lightning, tornadoes and earthquakes. Individuals with respiratory conditions should carry medication and monitor air quality indices in Mexico City.
Venue security disruption. Expanded perimeters, road closures, restricted access zones, and intensive screening procedures will alter commercial activity around stadiums and fan festivals. Retail, hospitality, and transportation businesses near venues should expect altered customer flow, temporary closures, and delivery delays.
Transport and logistics. Transportation-dependent companies need contingency plans for rerouted traffic and modified delivery schedules. Fan festivals present additional crowd-management challenges beyond the stadium perimeter.
Contractor and supply chain risks. In Mexico, DTOs may try to establish front companies to secure vendor contracts. Contractor due diligence and compliance controls need strengthening.
Workforce mobility. US visa processing demand will surge. Business travellers and relocating workers face prolonged waits, which could interfere with international operations.
Reputational risk. Heightened political tensions surrounding immigration enforcement and US domestic policy could expose sponsor-affiliated companies to public scrutiny. AI-driven synthetic media spreads faster than verification can respond. Political rhetoric will intensify during the US midterm election cycle, coinciding with the tournament.
UK citizens travel under the Visa Waiver Program. An approved Electronic System for Travel Authorisation (ESTA) is mandatory before departure. Cost: USD $21. ESTA is a two-year multi-entry authorisation, not a visa. Criminal convictions, previous visa refusals and visits to certain countries may disqualify applicants, in which case a B1/B2 visa interview is required.
UK citizens require an Electronic Travel Authorisation. Cost: CAD $7. Applied for online, typically approved within minutes. The passport must be valid for the duration of stay.
UK citizens are visa-free for tourism up to 180 days. A Forma Migratoria Múltiple (FMM) is required at the point of entry.
The US requires passports valid for at least six months beyond the intended stay for most non-VWP entrants. British passport holders under the VWP are not strictly subject to this requirement, but maintaining a reasonable margin is sensible.
Approximately 1,600 fans were subject to banning orders for Euro 2024. Most remain in force. (Euro 2024: More than 1,600 fans with banning orders will be stopped from going to the tournament, 2024) The UK policing operation for the 2026 World Cup is led by Cheshire Chief Constable Mark Roberts. Intelligence on identified persons is shared with US authorities. Attempted entry to the US with an active banning order is a criminal offence punishable by up to six months’ imprisonment.
Home-country consular officials are typically informed of a citizen’s detention and may provide limited support. Consular officers cannot interfere with local court procedures, provide legal representation, provide legal advice or cover legal fees. The treatment and status of dual nationals are determined by the local authorities.
Itinerary mapping. Every leg, every overnight, every match. Identify single-point-of-failure transitions — the moments where a delay, cancellation or incident has no fallback.
City-specific threat profiling. The risk matrix provides a starting point. Supplement it with current state intelligence for each city the principal will enter.
Accommodation vetting. Select hotels based on perimeter security, evacuation routes and proximity to emergency services infrastructure. Branding is not a proxy for security.
Transport architecture. Pre-arranged secure ground transport with vetted drivers in each city. Avoid reliance on rideshare applications on match days, when surge pricing and congestion compound exposure.
Medical contingency planning. Identify primary and secondary hospitals in each city. Ensure insurance documentation is accessible offline. Confirm that the policy extends to all three countries on the itinerary.
Communication plan. Primary and secondary contact methods. Defined check-in cadence. Local SIM provisioning or eSIM provisioning for each country.
The three host nations operate fundamentally different medical systems.
United States. Facilities are excellent. Costs are the highest in the world. Foreign insurance is almost certainly not accepted. The average UK medical claim in the US is £14,600. A fractured leg exceeds £280,000. (Cost of a Broken Leg: What It Typically Costs in the U.S., 2026)
Mexico. Private healthcare is of a good standard. The public system may deny service to foreign nationals. Private hospitals require upfront payment and have been known to retain passports as collateral. Foreign insurance is generally not accepted.
Canada. Universal public system, but the coverage does not extend to foreign visitors. Excellent care in Toronto and in Vancouver. Long emergency room wait times are common.
Minimum recommended cover: USD $100,000–$250,000 medical, with explicit medical evacuation coverage extending to all three countries. (World Cup 2026 Health and Medical Guide, 2026)
For UK travellers attending matches in Guadalajara, Mexico City or Monterrey, visit a travel health clinic six to eight weeks before departure. Consider hepatitis A, typhoid and hepatitis B vaccines. Drink only bottled water or purified water. Avoid ice, raw produce and street food, unless they are hygienically prepared. Pack insect repellent with DEET or picaridin. Keep medications in the original packaging. Seek immediate medical care for fever, rash, persistent diarrhoea or neurological symptoms.
If you require medical care in Mexico, use hospitals and clinics with a reputation for treating foreign travellers. Major private hospital networks such as Hospital Ángeles, Médica Sur and Christus Muguerza operate in host cities and offer English-speaking staff. Most embassies and consulates also provide lists of recommended facilities. In an emergency, call 911 for ambulance services. Always carry your passport and proof of insurance, and be prepared to pay for treatment up front.
Close protection at this tournament is a multi-city, multi-jurisdiction operation. The CP team must be licensed, or hold a valid exemption, in each US state the principal enters. Licensing requirements differ by state. In Mexico, the legal framework for private security differs from that in the UK and the US. Foreign CP operators require coordination with licensed Mexican security firms.
Vehicle pre-positioning at each venue and at the hotel is the baseline. Route planning must account for match-day road closures, protest activity and law enforcement exclusion zones established at short notice.
Advance reconnaissance of event venues is essential. Teams should assess security arrangements, build relationships with hotel security managers and local police, and revisit venues before the client arrives to verify that conditions have not changed.
For principals requiring a comprehensive service, security concierge functions complement protective and transport operations: meet-and-greet services, customs expedition, hotel key collection ahead of arrival, and GPS tracking with real-time visibility, check-in capability and duress alert functionality.
Security incident at a venue. Move away from the incident. Follow instructions from security personnel and law enforcement. Do not stop to film. Contact your CP team or emergency contact immediately.
Victim of crime. Report to local police and obtain a crime reference number. Contact your embassy or consulate. Contact your travel insurer within twenty-four hours.
Caught in a protest or demonstration. Leave the area by the most direct route. Do not engage. If you are unable to leave, move to an enclosed commercial premises and wait for the situation to clear. Contact your CP team or pre-arranged transport provider.
A weather event disrupts travel. Watch official communications. Do not try to drive through flooded roads. If a tornado warning is issued, seek immediate shelter at a designated location. Follow all official instructions.
Emergency numbers. United States, Canada, Mexico: 911. Mexico tourist assistance hotline: 078.
Recommended: Before travel, save the contact details of the nearest UK embassy or consulate in each host country on your phone and in a secure offline location. In an emergency, UK travellers can seek assistance from the following diplomatic missions:
United States: British Embassy, Washington, DC (phone: +1 202 588 6500), with Consulates General in major cities, including New York, Los Angeles, Chicago, Miami, Boston, Houston, Atlanta, and San Francisco.
Canada: British High Commission Ottawa (phone: +1 613 237 1530), with Consulates General in Toronto, Vancouver, Calgary, and Montreal.
Mexico: British Embassy Mexico City (phone: +52 55 1670 3200).
For updated information or other locations, visit the official UK government website: www.gov.uk/world. Save these contact details before departure for rapid access during a crisis.
The tournament is not uniformly safe or unsafe. Risk varies by host city, by neighbourhood within that city, and by the behaviour of the individuals attending. Families who conduct pre-travel planning, select accommodation carefully and maintain situational awareness will manage the majority of realistic threats. For families, choose child-friendly accommodation in secure areas, ideal with 24-hour reception, secure access points and on-site amenities. In crowded environments, designate a meeting point, ensure children carry ID cards with emergency contact information, and think about child GPS trackers or wristbands. Avoid public meetings where crowds may develop, and use pre-arranged transportation instead of public transit late at night. Regularly brief children on what to do if separated, and closely supervise them at all venues.
For the US, an ESTA is required (USD $21, valid for two years). For Canada, an eTA is required (CAD $7). For Mexico, UK citizens are visa-free for up to 180 days but must present a Forma Migratoria Múltiple at entry.
Opportunistic crime – pickpocketing, bag-snatching, ticket fraud – is the most common threat. Lone-actor terrorism is the most severe but least probable. Severe weather disruption is the most likely cause of operational interruption.
It is not optional. US healthcare costs are the highest in the world, and foreign insurance is rarely accepted. Minimum recommended cover: USD $100,000–$250,000 medical with emergency evacuation.
Kansas City has the highest violent crime rate among US host metros. Monterrey sits in contested cartel territory. Guadalajara presents documented nightlife drugging risk. Los Angeles hosts Fan Festivals near higher-crime neighbourhoods.
Fraudulent ticketing, phishing campaigns, exploitation of insecure Wi-Fi and AI-generated deepfakes are the main threats. Use authorised channels for purchases, a VPN for account access and scepticism towards unconfirmed claims circulating on social media.
Road closures, expanded security perimeters, delivery disruption and protest activities will affect commercial operations. In Mexico, contractor due diligence is essential due to the DTO front-company risk. US visa processing delays may disrupt workforce mobility.
Thirteen of sixteen host cities recorded temperatures above 30°C in the equivalent 2025 window. Only four stadiums, Atlanta, Dallas, Houston and Vancouver, have retractable roofs. The 2025 Club World Cup required water breaks due to excessive heat. Southern host cities carry the highest heat exposure.
US protocol suspends play for thirty minutes if a lightning strike is detected within approximately ten kilometres. Each additional strike resets the clock. Fans are directed to the shelter. During the 2025 Club World Cup, six matches were halted due to lightning, with delays of up to 2 hours.
Westminster Security provides close protection, secure transportation, risk assessment and security consulting services.
Westminster Security is providing close protection, secure transportation and journey management across all three host nations for the duration of the 2026 FIFA World Cup. Operational planning is underway. Principals, family offices and corporate security teams requiring a confidential discussion may use the button below.
Risk assessments reflect conditions as of 12 May 2026. This page will be updated at key milestones: ten days before the tournament opens (1 June), at the conclusion of the group stage, and following the final on 19 July. A post-tournament review will be published in August 2026.