The World Cup Was Safe Thanks to the People You Never Saw

Spain are world champions. One goal in extra time, a single goal conceded all tournament, a fitting way for a 39-day event to end. But the story I’ve been tracking since Day 1 isn’t really about the football. It’s about what it took to keep 104 matches, three countries and sixteen cities safe, and everyone watching from a fan zone, bar or living room far beyond those sixteen. The headline finding is a simple one. It was safe.

For the overwhelming majority of the millions of supporters who travelled to this tournament, the 2026 World Cup was safe, well organised and, by and large, forgettable in exactly the way good security should be. That’s not the absence of a story. That is the story. It happened because organisers, police, emergency services and partner agencies planned extensively, shared information and adapted as the operational picture changed.

The most persistent threat was digital

Cyber threats were one of the most persistent security challenges of this tournament, and they barely touched a headline. Reporters covering the build-up described the digital footprint of a three-nation, sixteen-city event as one of the largest attack surfaces sport has ever created, with more than five million fans expected through the gates. The response matched the threat. By the end of the tournament, a coordinated federal enforcement action had seized more than 1,000 domains used for illegal streaming, following three separate enforcement actions. It’s a pattern every major event now shares. Authorities confirmed more than 140 cyberattacks struck the 2024 Paris Olympics, yet none disrupted the Games themselves. That is what continuous, coordinated detection looks like.

Fraud followed the fans, relentlessly

Where there’s a World Cup, there are scammers, and federal law enforcement agencies were warning about it before a ball was kicked. In May, federal authorities  issued a formal alert that criminals were spoofing FIFA’s own website through near-identical domain names, built to harvest personal data and sell tickets and hospitality packages that didn’t exist. That warning proved right. In Indianapolis, one supporter paid $22,000 over several months to a scammer posing as a sponsor marketing contact, promising cut-price tickets, then vanishing without delivering a single one. In Seattle, an FBI Special Agent in Charge told local media the pattern was entirely predictable: big events reliably draw fraudsters looking to exploit fans’ trust and enthusiasm. 

Fraud wasn’t confined to screens, either. Weeks before kick-off, Toronto police made the largest counterfeit soccer merchandise seizure in Canadian history: more than 16,000 fake jerseys and flags, worth an estimated CA$3.5 million, moving through what looked, on the surface, like a legitimate distribution company. Counterfeit supply chains like this aren’t simply a brand-protection issue, they can involve organised criminal networks and proceeds that move on into other illicit activity.

Multiply that by thousands of smaller versions across three countries, and the biggest risk to most supporters wasn’t in a stadium at all. It was in their inbox.

Weather and logistics were the most disruptive operational factors, tournament-wide

Houston set the tone on day one. Twenty-two fans were treated for heat-related illness at the FIFA Fan Festival, four transported to hospital, according to the Houston Office of Emergency Management, with at least two confirmed cases of heatstroke. The pattern repeated for 39 days: heat domes across the eastern United States, oppressive humidity in Miami, altitude and unpredictable storms layered on a 100,000-capacity crowd in Mexico City. Weeks after Houston, lightning brought the tournament’s first in-match weather stoppage, halting France against Iraq in Philadelphia, where fans were moved out of their seats into the concourse under FIFA’s mandatory lightning protocol, and play suspended for more than two hours. Stadiums are resilient. Fan zones, transport corridors and cross-border logistics rarely are.

Public order needed constant, real-time judgement

Some of the chaos was foreseeable but some of it wasn’t. 

A vehicle drove into crowds celebrating Mexico’s win over Czechia in Cabo San Lucas, injuring 17 people. Days later, four fans died from asphyxiation and cardiac arrest during celebrations following Mexico’s win over Ecuador, prompting authorities to deploy around 17,000 police and emergency personnel for the England fixture that followed. Separately, more than 300 unauthorised drones were intercepted around World Cup venues in a cross-agency coordinated operation, before any of them became a story. Not every incident could be prevented. But where prevention worked, it worked quietly, and where it didn’t, the response had to be immediate.

Some of it travelled well beyond the tournament’s borders. When France eliminated Morocco in the quarter-finals, Paris deployed around 20,000 police, and the large-scale disorder many feared didn’t materialise there. But it did break out elsewhere: disorder in west London left a police officer hospitalised and several arrests made, according to police, with further disorder reported in Amsterdam, Rotterdam and The Hague. A World Cup’s public order footprint isn’t limited to its host cities, or even its host countries.

And then there were incidents that had nothing to do with the tournament at all but demanded a response regardless. A drive-by shooting near San Jose’s main fan gathering point left one person dead and another critically injured. Police said it was isolated, with no indication it was linked to the World Cup, but extra officers were deployed around the fan zone regardless. The public doesn’t distinguish between “caused by the event” and “near the event.” Security teams have to make that judgement instantly, and still keep people calm and safe either way.

Thank you

To every police officer, transport worker, medic, steward and volunteer, across the three host nations and in every fan zone, bar and public square around the world where people gathered to watch: thank you. You dealt with heat, storms, fraud, protest and the occasional unrelated tragedy, and you did it without most of the watching world ever noticing. That’s not luck. That’s professionalism.

Dataminr supported agencies responsible for emergency management and transportation security during the tournament, helping operations teams track weather, infrastructure, and crowd-safety conditions from publicly available information in real time. 

What’s next

The map changes now. Los Angeles hosts the 2028 Olympics, a more geographically concentrated operation than this tournament, though still spread across a wide Southern California footprint with events as far out as Oklahoma City. The Euros come to the UK and Ireland 2028. Then in 2030 the World Cup returns, primarily hosted by Spain, Portugal and Morocco, with centenary matches also played in Argentina, Paraguay and Uruguay: a six-country, three-continent operating environment, echoing exactly the cross-border complexity this tournament just worked through. Finally Brisbane hosts the 2032 Olympics. Every one of those host cities has a genuinely successful World Cup to learn from, and that’s a good starting point. The stadiums will be different. The need to see things forming in real time, before they become a crisis, won’t be.