Kaspersky GReAT experts analyzed more than 84,000 free Wi-Fi network signals across three major Mexican cities hosting the 2026 World Cup. The analysis covered Mexico City, Guadalajara and Monterrey, and revealed that 17% of the networks had weak or no encryption, potentially exposing users to personal and banking data theft. Only 2.9% of the analyzed networks were found to use the latest WPA3 security protocol.
The upcoming World Cup 2026, which kicks off on June 11, will partly be hosted in Mexico, and thousands of tourists are expected to attend the tournament. Kaspersky Global Research & Analysis Team (GReAT) researchers have mapped and performed a security audit of the open Wi-Fi networks that visitors might encounter in the host Mexican cities.
The researchers analyzed 69,473 unique public Wi-Fi hotspots and 84,588 signal records across popular locations in the three Mexican host cities for the 2026 World Cup. The study found that every 6th open access point (17%) was unsafe, including 16.5% in Mexico City*, 18.5% in Guadalajara**, and 17.2% in Monterrey***. Such networks may expose users to risks including passive traffic interception, unauthorized monitoring, rogue access point attacks and credential harvesting techniques.
Almost half (45%) of the analyzed networks and which were categorized as secure (using WPA2/WPA3), were found to expose WPS (Wi-Fi Protected Setup) capabilities, including 53.7% in Mexico City, 50.9% in Guadalajara and 47.5% in Monterrey. Because WPS is an outdated and easily compromised protocol, networks that continue to expose it to nearby devices may be vulnerable to unauthorized access and WPS-based attacks. As a result, users connected to these networks could face risks such as interception of network traffic, exposure of sensitive data, session hijacking and device compromise through malicious activity within the same network.
“One of the first things travelers do after turning off airplane mode is look for internet access. Staying connected is now essential for navigation, transportation, payments, communication and social media. But convenience often comes at the expense of security. Our research found that while 83% of wireless networks in major Mexican cities appear secure, many still expose outdated convenience features despite using modern encryption standards. Travelers should remember that public Wi-Fi networks and the vulnerabilities behind them remain a prime target for cybercriminals, especially during periods of high tourist activity” – says Maria Isabel Manjarrez, security researcher at Kaspersky's Global Research & Analysis Team.
When accessing open Wi‑Fi networks, data becomes susceptible to potential security threats. Security experts recommend using a Virtual Private Network (VPN), such as Kaspersky VPN – a solution that encrypts every bit of traffic and masks the user’s IP address, creating a secure tunnel between the device and the internet. This dual protection guarantees that personal information remains confidential, even on unsecured networks.
To learn more about the safety of Mexico Сity, Guadalajara and Monterrey Wi-Fi, visit Kaspersky Daily. For more technical details, read the Securelist article.
To stay safe, Kaspersky experts also recommend following these tips:
Avoid sensitive transactions: refrain from accessing banking or other sensitive accounts while on public Wi-Fi.
Verify the network: ensure the network is legitimate by confirming with the establishment offering it.
To protect your data, use a reliable VPN solution.
Enable firewall: make sure your device’s firewall is active to block unauthorized access.
Use strong passwords: always use strong, unique passwords and enable two-factor authentication for extra security.
Manage sensitive data securely: avoid storing passwords or recovery phrases in your photo gallery or notes; instead, use a dedicated, trusted password manager such as Kaspersky Password Manager.
Use reliable cybersecurity software like Kaspersky Premiumto prevent infections and scan your device regularly.
Keep software updated: regularly update your operating system, apps and antivirus software to protect against the latest threats.
Disable file sharing: turn off file sharing and AirDrop on your device to prevent unauthorized access.
To avoid relying on public Wi‑Fi, purchase an eSIM from the Kaspersky eSIM Store before your trip for a seamless internet connection abroad.
*The analysis areas in Mexico City include: Mexico City Stadium, Mexico City International Airport, Zócalo, Paseo de la Reforma, Colonia Roma, La Condesa, Polanco, Coyoacán.
**The analysis areas in Guadalajara include: Guadalajara Stadium, Guadalajara International Airport, city center, Zapopan, Providencia, Avenida Chapultepec, Colonia Americana, Tlaquepaque, the area around Andares.
***The analysis areas in Monterrey include: Monterrey Stadium, Monterrey International Airport, Fundidora Park, Cintermex Monterrey, downtown area, Barrio Antiguo, MacroPlaza, San Pedro financial district.
