Businesses Will Face Heightened Security and Operational Risks at 2026 World Cup Events in Mexico

• Security measures under Plan Kukulkán will reduce risks at official venues but likely displace disruptions, protests, and crime to less-secure areas, increasing exposure for businesses outside vigilance zones.
• Businesses are highly likely to face operational disruptions in host cities due to road closures, restricted access, and large-scale security controls.
• Organized crime groups will likely exploit the tournament through extortion, fraud, and illicit markets, elevating financial, legal, and reputational risks for businesses.
• While deliberate targeting of foreign nationals remains unlikely, the risk of incidental exposure to violence persists—particularly in higher-risk areas such as areas surrounding Guadalajara. 

Business disruptions are likely during the event as officials will tighten security measures through large security focus zones, road closures, and rigorous screening procedures as part of Plan Kukulkán. The operation will also establish vigilance zones in the three host cities to cover the stadiums, Fan Festival areas, and other key gathering points.

In the capital, key vigilance zones will include the Azteca Stadium (also known as Mexico City Stadium), the Zócalo, and areas such as Paseo de la Reforma and the Ángel de la Independencia monument. In Guadalajara, officials will focus on securing the Akron Stadium (also known as Guadalajara Stadium) and the Plaza de la Liberación. In Monterrey, security forces will concentrate on the BBVA Stadium (also known as Monterrey Stadium), Parque Fundidora, and Macroplaza.

In addition to the three host cities, Mexican authorities plan increased security measures for the Fan Festival Tajamar in Cancún, Quintana Roo State. There will also be security deployments to Querétaro, Tijuana, Pachuca, Toluca, Puebla, and Torreón. Other locations likely to be in the focus of security operations include key accommodation areas, major thoroughfares, and airports, especially those serving the host cities.

Businesses across several sectors, particularly the hospitality sector, may face increased risks of disruptive protests, vandalism, and criminal activity, such as the sale of illegal substances to fans, as hotels, bars, and restaurants outside the identified vigilance zones may be viewed as softer targets than heavily secured official sites. 

Organizations may face increased reputational and compliance risks as criminal groups could seek to exploit commercial opportunities during the World Cup, including by setting up front companies. The US government’s designation of major Mexican drug-trafficking organizations (DTOs) as foreign terrorist organizations also increases these risks, as legitimate businesses could face liability by having direct or indirect transactions with these organizations or the front companies they manage. DTOs could also extort organizations, such as tour operators and vendors, threatening retaliation if they refuse.  

The deployment of security assets around the World Cup events could create exploitable gaps in already high-risk states, enabling DTOs to expand operations, contest territory, and increase illicit activity while national attention remains fixed on the tournament. However, the likelihood of DTOs intentionally targeting foreign nationals in attacks remains low. The primary aim of DTOs is to generate revenue and profits, and their ability to do so would likely decrease if they were to engage in direct attacks on foreigners. This would almost certainly result in an extensive anti-DTO campaign by the authorities, hampering criminal operations. Foreign nationals may still face incidental risks, including exposure to generalized criminal violence, shootings, kidnappings, or transport disruptions. However, they are unlikely to be deliberately targeted. Of the three host cities, Guadalajara remains the one posing a higher relative risk related to organized crime. 

Businesses operating during the World Cup in Mexico will face a complex environment shaped by heightened security measures, uneven risk distribution, and increased criminal activity. Proactive planning, strong compliance controls, and location-specific risk mitigation strategies will be essential to safeguard operations, personnel, and reputation.

Organizations may assess location-based revenue risks and opportunities by mapping proximity to the established vigilance zones and position to capture increased demand near official venues while implementing mitigation measures in less-secure areas. Businesses may consider implementing measures to mitigate criminal exposure by training staff to recognize extortion attempts and fraud schemes, establishing reporting procedures, and coordinating with local authorities where necessary.

Enhancing workforce safety and crisis management plans by updating protocols and monitoring local risks, especially in areas with a significant presence of criminal groups in and around Guadalajara, can allow businesses to respond quickly to incidents that could impact staff or reputation. 

Leverage intelligence and integrated risk management at complex, multi-city events like the World Cup.  

Learn More about Preparing for the 2026 World Cup