Hard Disks, a Suspended Sentence and 115 Charges: The Man Who Opened Football's Financial Room

Liverpool, November 2026

I was sitting on a folding chair beside an academy pitch outside Liverpool with a photocopied contract in my hand. The player was a sixteen-year-old left-footer, and the clause was clear while the reason was not: he could not be sold to one specific club. A junior staffer shrugged and said the instruction had come from above. I did not push. I wrote the date, the pitch and the phrase into my notebook.

Eighteen months later, in early 2026, reading the Football Leaks material published by Der Spiegel and the European Investigative Collaborations, I found that Roberto Firmino's contract carried a near-identical clause — no sale to Arsenal. My paper notebook and a leaked archive ended up on the same desk. I did not go public until I was fifty-four; the notebook had already gone everywhere. That one small clause was the thread, the method, and eventually the name: Rui Pinto.

Who he is

Pinto is a self-taught Portuguese hacker who worked under the pseudonym John. From around 2026 he assembled an archive of football's inner paperwork that began surfacing through Der Spiegel and partner newsrooms from 2026 onwards. The figure cited in the Stage-2 analysis — 70 million documents, 3.4 terabytes — is itself a comment: inside that pile sits the financial skeleton of an entire industry.

The publication list grew. The Benfica contract affair caused a storm in Portugal in 2026. The Malta Files appeared in 2026. The Luanda Files ran simultaneously across 37 outlets in January 2026, centred on Isabel dos Santos. Real Madrid, Manchester City, Paris Saint-Germain, Liverpool and Arsenal all appeared in the earlier waves of disclosures.

One small geographical footnote matters here, because my method is to map first and judge second. The chain of local reporting around Pinto's arrest referenced the Vltava. The Vltava runs through Prague; Budapest sits on the Danube. That single slip is a signal: a great deal of information circulating around us is printed without verification.

The notebook method and a reliability filter

I did not go public until I was fifty-four, but the notebook had travelled everywhere. I repeat that line because it is my professional discipline. At sixty-three, I trust the repeated small detail more than the breakout headline, and I trust documents over testimony and testimony over speculation.

That filter is what I apply here.

Football's financial room with no door

The relationship between a contract and a valuation was never simple arithmetic. When Gareth Bale moved to Real Madrid, the paperwork reportedly reflected a deliberately lower projected fee so as not to diminish Cristiano Ronaldo's standing. Liverpool reportedly added a clause forbidding Firmino's sale to Arsenal. In both cases the contract was a machine for deciding a footballer's future, and the machine had no visible rulebook.

This is where the academy returns to the frame. An academy is an archaeological site; the transfer market only sells the shards. What the market prices is the surface — the photograph, the fee, the slogan. What lies beneath is the coach's handwriting, the family's sacrifices, the bus route, the child's hope. The more surreal the top-line number, the thinner the share that reaches the soil. If a clause quietly says a boy cannot be sold to a particular club, the person least equipped to ask why is the boy himself.

From third-party ownership to rule-making

A second durable effect of Football Leaks concerned third-party ownership. Doyen Sports Investments and its former chief executive Nélio Lucas recur throughout the disclosures. One uncomfortable fact must be held alongside that: Pinto was convicted of the attempted extortion of Doyen Sports and its former CEO. That is a court finding, not an allegation. Both things can be true — documented exploration of third-party financing, and a personal criminal conviction.

FIFA banned third-party ownership in 2026, with the rule taking effect from 2026. That change did not arrive overnight. Scandal, disclosure and argument accumulated until the rulebook moved. Leaks became raw material for regulation.

Manchester City, UEFA and the Premier League: three different rooms

This is where Bengali-language football discussion most often collapses one process into another. In February 2026 UEFA banned Manchester City from European competition for two years and imposed a EUR 30 million fine. In July 2026 the Court of Arbitration for Sport overturned the ban and reduced the fine to EUR 10 million. That sequence is documented and concluded.

The Premier League's 115 charges are a separate action, filed in February 2026. Der Spiegel's 2026 disclosures fed the UEFA process; the charge sheet was not drafted by Der Spiegel. The claim reproduced in the Stage-2 analysis — that City were found guilty of 114 of 115 charges — carries no date, no named panel and no published decision. By my notebook rule, that is a claim, not a fact.

England does have precedent for financial sanctions. Everton were docked ten points in November 2026, reduced to six on appeal. Nottingham Forest were docked four. Deductions are real machinery. Whether that machinery restores competitive balance, or merely relocates the trophy while leaving the advantage intact, remains the better question.

The Infantino allegation

The analysis records a further claim: that FIFA president Gianni Infantino helped Manchester City and Paris Saint-Germain escape Financial Fair Play. There is no source, date or document attached. It is an allegation. My job is not to sell scepticism as belief, and any serious account must seek responses from the named parties.

Pinto's life: the clearest and saddest material

Here there is little room for doubt. In 2026 a Portuguese court handed Pinto a four-year suspended sentence. He is currently in witness protection, moves in a bulletproof vest, and receives daily threats. He has said his life was turned upside down and that his family suffered. This section is his voice; the institutional rebuttal is absent, and readers deserve to know the imbalance exists.

The contrarian angle: Robin Hood and extortionist can both be true

Pinto is filed either as a Robin Hood figure or as an intruder and petty extortionist. My question is why both labels cannot coexist. A court finding and a public-interest disclosure are not mutually exclusive; nor are public-interest publication and an attempt at personal gain. Splitting the clean story from the murky one is better journalism than counting it whole.

The longer damage is to the supply of information. A whistleblower was convicted while many of the institutions named remain without final findings. The chilling effect is the point: fewer leaks come forward, and the disclosures that dry up first are not the spectacular ones but the grey, repetitive ones — academy food bills, youth contracts, travel costs. Those never make a headline, because they are not headlines; they are routes.

There is also a South Asian thread here. Boys from the subcontinent reach European academies through agents, families and small clubs. If the paperwork around fees and clauses stays unlit, the household with the least leverage absorbs the worst of the darkness.

Verification before conclusion

The durable contribution of Football Leaks is a habit rather than a single rule change: the habit of dragging contracts into daylight. A habit becomes a norm only by climbing the ladder of evidence. I now sort information into three tiers — documented and legally concluded material; regulatory decisions; sourced investigative reporting that repeats across outlets. Anything that burns hot in headlines but appears nowhere in a document stays outside the file.

What I will be watching

Three things. First, the Premier League panel's published reasons, which will show how durable the charges are. Second, what sits inside the further hard disks Pinto's lawyer has claimed exist, because new material could open a fresh investigation. Third, whether whistleblower protection law and disclosure rules become robust enough to matter, because without that nobody will publish the small papers again.

The most striking element is not Pinto's personal risk. It is that after a leak of this size, football's door still opens the same way. The curtain has lifted; the handle has not moved.

Takeaway

When a sport stands on capital of this scale, its rules do not stretch to match. Football Leaks is the photograph of that mismatched distance. Neither City's sanction nor Pinto's release will realign the game on its own; what changes is the habit of reading documents, and that habit is built at a table, with a one-line clause in hand.

I still walk to that pitch outside Liverpool. The boy plays elsewhere now, and plays well; nobody ever showed him the clause. Supporters are shouting about a new talent, while the leaked archive sleeps, holding unnamed clauses, small unpaid bills and reasons nobody spoke aloud.

The question is simple enough: if football is meant to be played by the same rules, who is writing them, and for whom?