Rui Pinto: The Football Leaks hacker who changed Manchester City forever
Table of Contents
 |
KEY TAKEAWAYS
- Rui Pinto's Football Leaks helped trigger scrutiny of Manchester City's finances.
- City were found guilty of serious financial breaches covering nine seasons.
- Pinto now faces losing witness protection amid claimed death threats.
Either way, his influence on football is difficult to ignore.
From a computer in Budapest, the Portuguese national accessed millions of confidential documents belonging to clubs, players, agents and football organisations.
He published some of them through a mysterious website called Football Leaks.
The documents exposed hidden contracts, sponsorship arrangements, player salaries, agent agreements, offshore structures and internal correspondence.
They eventually reached journalists at Der Spiegel and other members of the European Investigative Collaborations network.
And now, more than a decade after Football Leaks first appeared online, Pinto's story has collided with one of the biggest scandals in Premier League history.
The student behind Football Leaks
Rui Pedro Gonçalves Pinto was born on 20 October 1988 in Vila Nova de Gaia, across the Douro River from Porto.He grew up supporting FC Porto and developed an early interest in computers.
He studied history at the University of Porto but never completed the degree. During an Erasmus period in Budapest, he developed a stronger connection with the Hungarian capital and eventually returned there.
Pinto was not a conventional professional hacker. Much of his technical knowledge was self-taught.
Then, in 2015, Football Leaks appeared.
The concept was straightforward: reveal the information football's most powerful institutions did not want the public to see.
Pinto operated anonymously under the pseudonym "John."
At first, the website concentrated heavily on Portuguese football, particularly Benfica and Porto.
But the scale quickly expanded.
Contracts began appearing online. So did correspondence between executives, details of transfer agreements, sponsorship arrangements and financial documents.
One of the early major stories involved Doyen Sports, a powerful investment fund involved in football transfers.
Football Leaks published documents that raised questions over Doyen's influence at Dutch club FC Twente. The revelations contributed to regulatory action against the club.
Football Leaks was no longer simply an anonymous website. Its material was beginning to have real-world consequences.
From Football Leaks to Der Spiegel
The biggest transformation came when Pinto established contact with journalists.Among them was Portuguese journalist António Varela, who later helped connect Football Leaks with German investigative journalist Rafael Buschmann and Der Spiegel.
The resulting collaboration became enormous.
Tens of millions of documents were shared with journalists. Pinto's archive included contracts, emails and financial information relating to some of the biggest names in world football.
The material involved clubs and individuals including:
- Cristiano Ronaldo
- Lionel Messi
- Neymar
- José Mourinho
- Paris Saint-Germain
- Real Madrid
- Bayern Munich
- Manchester City
Data journalist Christoph Winterbach later compared examining the archive to being a child in a sweet shop.
But the story also raised an uncomfortable question:
Where is the line between whistleblowing and criminal hacking?That question would follow Pinto for the rest of his life.
Rui Pinto was not simply a whistleblower
The heroic version of the Rui Pinto story leaves out some important details.Pinto did not merely stumble across wrongdoing and hand evidence to journalists.
He actively sought access to computer systems and private communications.
And in the Doyen case, he attempted to obtain money in exchange for not publishing confidential information. The proposed payment was more than £400,000.
Pinto did not ultimately receive the money, but the episode became central to the prosecution's case against him.
In September 2023, he was sentenced in Portugal to four years in prison, suspended, after being convicted of offences including attempted extortion, unlawful access and violation of correspondence.
He was also given a six-month suspended sentence in France in November 2023 for illegally accessing emails belonging to Paris Saint-Germain executives.
That history makes it difficult to describe Pinto simply as a modern-day Robin Hood.
His methods were illegal, but the information he obtained also exposed matters of substantial public interest.
That contradiction is at the heart of his story.
The Cristiano Ronaldo controversy
Perhaps the most famous individual story connected to Football Leaks involved Cristiano Ronaldo.In 2009, American woman Kathryn Mayorga accused Ronaldo of raping her in a Las Vegas hotel.
Ronaldo denied the allegation and said the encounter was consensual.
Mayorga contacted police and underwent a medical examination. The two sides later reached a confidential civil settlement under which she received about £243,000.
Years later, Football Leaks documents obtained by Der Spiegel brought the case back into the global spotlight.
The documents included material from Ronaldo's legal team relating to the allegation.
Mayorga subsequently filed a civil lawsuit and the criminal investigation was reopened.
However, prosecutors in Las Vegas decided in 2019 that there was insufficient evidence to prove the allegation beyond a reasonable doubt.
The civil case continued. In 2022, a US judge dismissed Mayorga's lawsuit after finding that her lawyer had improperly relied on stolen and privileged documents. An appeals court upheld that decision in 2023.
The case demonstrated the complicated nature of Football Leaks. The leaked material could expose stories that would otherwise remain hidden, but the method used to obtain that material could itself undermine subsequent legal proceedings.
The Manchester City connection
The Manchester City story is arguably the most important part of Pinto's football legacy.In 2018, Der Spiegel published Football Leaks documents concerning City's sponsorship arrangements and the source of certain commercial revenues.
The central question was simple.
Were sponsorship payments genuinely coming from independent commercial partners, or were some of the funds effectively being provided by entities connected to City's owner?
That distinction mattered because of football's financial regulations.
UEFA subsequently investigated Manchester City.
In 2020, City were banned from European competition for two seasons and fined around £26.7 million.
However, the Court of Arbitration for Sport overturned the European competition ban. Some allegations were not sufficiently established, whilst other matters were considered time-barred.
The Premier League's investigation continued.
In February 2023, the league referred more than 100 alleged breaches to an independent commission.
The case would eventually become one of the most complex financial investigations ever conducted in English football.
🔥 HOT ITEM
Manchester City Home Kit 2026/27
Fresh from the latest launch. Shop the new season look.
Matchday ready in City's latest home colours
Get Yours →
Manchester City found guilty
On 29 September 2026, the Premier League announced the independent commission's findings.Manchester City were found guilty of all charges concerning serious breaches of Premier League financial rules over the nine-season period from 2009/10 to 2017/18.
The commission found that City had:
- used "sham" commercial contracts
- artificially inflated revenue
- reduced reported costs
- submitted misstated accounts
- concealed the true state of their finances from auditors and regulators
- breached Premier League and UEFA spending limits
- failed to co-operate fully with the Premier League investigation
Of that amount, only around £119.25 million represented the actual base fees paid by the sponsors.
The remaining amount £830.69 million was found to have been funded by Abu Dhabi United Group, the club's owner, according to the commission's findings.
The commission also found that the overall effect of the schemes was to artificially inflate revenues and reduce costs by more than £900 million.
The figures are staggering, but one distinction is essential.
Manchester City have not been sentenced.
The punishment is a separate matter.
The club have denied wrongdoing and appealed the verdict. Potential sanctions could include financial penalties, points deductions, transfer restrictions, title-related consequences or even more severe sporting punishment, but no specific sanction should currently be presented as certain.
That appeal could take months.
It could also fundamentally alter the consequences of the commission's findings.
Did Rui Pinto bring down Manchester City?
Not by himself.That distinction matters.
Pinto's documents helped journalists expose the financial arrangements that triggered scrutiny and contributed to UEFA and Premier League investigations.
But the Manchester City case was ultimately determined by an independent commission after a lengthy legal process.
The commission's verdict is therefore not simply "Rui Pinto was right."
It is more complicated than that.
Pinto provided information.
Journalists investigated it.
Football authorities examined the allegations.
Manchester City defended themselves.
And an independent commission eventually reached its own conclusions.
Nevertheless, without the Football Leaks material, the trajectory of the Manchester City investigation could have been very different.
That makes Pinto an important figure in the history of the case, even if calling him solely responsible would be inaccurate.
The man who became both defendant and informant
Pinto's relationship with the Portuguese justice system became increasingly unusual.He was arrested in Budapest in January 2019 after Portugal sought his extradition.
He spent more than a year in detention.
Eventually, he agreed to co-operate with authorities and gave investigators access to encrypted archives.
In August 2020, he entered Portugal's special witness-protection programme.
The result was an extraordinary contradiction.
Pinto was a convicted cybercriminal.
But he was also providing information to investigators.
He had illegally obtained confidential material.
Yet some of the same material was considered valuable enough for authorities to examine.
In April 2026, that contradiction became even more striking.
A Lisbon court acquitted Pinto of all 241 charges in his second major Portuguese trial.
The court ruled that the prosecution was invalid and that the case involved procedural violations, including the fact that Pinto was effectively being prosecuted again over circumstances connected to an earlier conviction.
Portugal's Public Prosecutor's Office appealed the decision.
So Pinto's legal position remains complicated.
He has been convicted of serious offences. He has also been acquitted of 241 other charges.
The two facts can coexist.
Now Pinto is going into hiding
The latest chapter may be the most dramatic.On 2 October, Pinto said he had been informed that his participation in Portugal's witness-protection programme would end on 10 October.
He said the decision would remove the security arrangements that had protected him since 2020.
Pinto has also claimed that he has received multiple death threats and faces a serious risk of assassination.
Those claims have been repeated by his legal representatives, but the precise nature and credibility of the threats have not been publicly established.
Pinto therefore has no choice but to relocate to an undisclosed location indefinitely.
His lawyers have criticised the decision to end his protection and warned of serious consequences.
Importantly, there is currently no established evidence that the termination of his protection was ordered as retaliation for the Manchester City verdict.
The timing is striking, but timing alone does not establish causation.
Hacker or whistleblower?
That may be the wrong question.Rui Pinto is both more complicated and less comfortable than either label suggests.
Calling him a hero ignores the illegal methods he used.
Calling him merely a criminal ignores the enormous public-interest consequences of the information he obtained.
Football Leaks exposed the hidden financial architecture of elite football.
It helped journalists investigate offshore structures, taxation, sponsorship arrangements, agent relationships and confidential contracts.
Its material contributed to investigations involving some of the world's biggest clubs and players.
And now, more than a decade after Pinto first appeared online as "John," documents from his operation sit somewhere near the beginning of the chain that led to one of the biggest financial verdicts in Premier League history.
What happens next?
For Manchester City, the next stage is the appeal.The club remain in the Premier League and have not been stripped of any titles as a result of the verdict.
Sanctions have yet to be determined.
For Pinto, the immediate issue is personal security.
His witness protection is scheduled to end on 10 October, whilst he is preparing to leave Portugal.
That leaves both stories unresolved.
But the significance of Football Leaks is already difficult to reverse.
In 2015, an anonymous Portuguese man sitting behind a computer began publishing documents that powerful football organisations never expected the public to see.
More than a decade later, those documents have travelled through newsrooms, courtrooms, regulatory investigations and international authorities.
They eventually became part of the story surrounding a verdict that could reshape the history of the Premier League.
Post a Comment