Manchester City, Football Leaks
and the document trail that started it all

The verdict that football has been waiting for

More than three years after the Premier League formally charged Manchester City with 115 alleged breaches of financial rules — a number that subsequently grew to 130 — English football is bracing for the most consequential verdict in its history. The independent commission that heard the case over twelve weeks in late 2024, and has been deliberating ever since, is expected to deliver its judgment imminently. The hearing reviewed an estimated 500,000 pieces of evidence covering the period between 2009 and 2018.

The charges cover alleged failures to provide accurate financial information, alleged breaches of UEFA's Financial Fair Play regulations, alleged failures to provide accurate player and manager remuneration details, and — adding a further 35 charges — alleged failures to cooperate with the Premier League's investigation. Manchester City have consistently and strenuously denied all wrongdoing.

If found guilty, the potential sanctions range from substantial fines and points deductions — estimates of between 40 and 60 points have been cited — to, in the most extreme scenario, expulsion from the Premier League. Legal experts note that any liability finding would likely be followed by a separate sanctions hearing, with appeals possible at each stage. The process could extend considerably further even after the initial verdict.

Where it really began — Football Leaks

The Premier League's investigation did not begin with its own intelligence. It began, as several accounts have now confirmed, with the Football Leaks publications of November 2018 — a flood of confidential documents from clubs, agents and governing bodies across European football, released by the German magazine Der Spiegel and its media partners.

Those documents included internal communications and financial records relating to Manchester City's dealings with UEFA and its Abu Dhabi ownership. They raised questions that the Premier League could not ignore — and triggered the four-year investigation that culminated in the February 2023 charges.

The Football Leaks material did not emerge from nowhere. It was stolen — hacked from the systems of clubs, agents and organisations across Europe by a Portuguese individual named Rui Pinto, operating from Budapest under the pseudonym "Football Leaks."

International Insight's role

International Insight played a direct role in identifying and tracing Rui Pinto. At a time when his identity was unknown and his location concealed, our investigation established who he was, where he had come from and — critically — where he was living. We identified him as Rui Pedro Gonçalves Pinto, a former history student from Vila Nova de Gaia, Portugal, who had moved to Budapest and was living under a valid student visa while attending — though rarely appearing at — a local university.

Pinto was careful about his own digital footprint. His social media accounts were deleted. But his network of friends and acquaintances was less cautious. A patient process of source development and open-source analysis assembled a detailed picture of his location, movements and identity — placing him at a specific address in Budapest.

International Insight provided that intelligence to the relevant parties in 2016. Rui Pinto was arrested at that address on 16 January 2019 — three years later — on a European Arrest Warrant. He was extradited to Portugal and faced 147 criminal charges including illegal access to data, violation of correspondence and attempted extortion.

The chain of consequences

The chain of events from Pinto's hacking activities to the Manchester City charges is long but direct. Pinto stole documents. Those documents were passed to Der Spiegel and published as Football Leaks in November 2018. The publications revealed financial information relating to Manchester City that prompted the Premier League to begin its own investigation. That investigation took four years. It produced 130 charges. Those charges were heard over twelve weeks in late 2024. And the verdict — potentially the most significant in the history of English club football — is now awaited.

None of this means that the charges are proven, or that Manchester City are guilty of anything. The club has maintained its innocence throughout and the independent commission may well find in its favour. But the origin of the process is not in dispute: it began with stolen documents, published by investigative journalists, that contained information the football authorities could not ignore.

What this tells us about investigative intelligence

The Manchester City case is, among other things, a demonstration of the long reach of properly obtained documentary evidence. Documents stolen in 2015 and 2016, published in 2018, triggered a regulatory investigation in 2019, produced formal charges in 2023, were heard in 2024 and will produce a verdict in 2026. The evidentiary chain stretches more than a decade.

It is also a reminder that the most consequential intelligence often comes not from official channels but from unconventional sources — leaked documents, human contacts, information that exists but has not been formally disclosed. The Premier League's own investigation, working through conventional regulatory channels, would not have reached these documents without the Football Leaks publications. The publications would not have existed without Pinto. And Pinto's activities might have remained anonymous considerably longer without the investigative work that identified and located him.

For lawyers, wealth fund managers and communications professionals, the lesson is consistent with what we say about every major case: the information that changes outcomes is rarely the information that is formally available. It requires different methods to find it.