Rui Pinto spent the best part of the last 10 years as a name that football’s powerful people muttered with a wince, a self-taught hacker from the Porto suburbs whose stolen emails became the raw material for the Premier League case that ended this week with Manchester City found guilty on 114 of the 115 charges brought against them that eventually led to one of the biggest disciplinary cases in Premier League history.
A computer enthusiast with a taste for football, a remarkable ability to access confidential information and an apparent willingness to publish what he found. His name became familiar long before Manchester City’s case reached its extraordinary conclusion, although few people could have predicted how far those early leaks would travel.
Now, after an independent Premier League commission found Manchester City guilty of the financial-rule charges brought against the club over the 2009/10 to 2017/18 seasons, Pinto has once again found himself at the centre of the story.
There is an important qualification, though. Pinto did not personally bring the Premier League case, conduct its investigation, or decide Manchester City’s guilt. His leaked material helped trigger scrutiny by journalists and football authorities, after which investigators built their own case.
Who is Rui Pinto?
Pinto is 37, was born and raised in Vila Nova de Gaia, just across the river from Porto, and taught himself most of what he knows about computers, with a former geography teacher recalling a pupil who was very good with them and then being startled to see him unmasked as the founder of Football Leaks.
His earliest targets were close to home, and the first documents he chased concerned Benfica and FC Porto, which gives the whole story a faintly provincial beginning that sits oddly beside the global fallout that followed.
Pinto operated initially under the pseudonym “John”, keeping his identity hidden while Football Leaks began releasing material that offered an unusually intimate look inside the financial machinery of professional football.
The material was huge.
Millions of documents eventually reached investigative journalists, with German publication Der Spiegel and its European Investigative Collaborations partners playing a major role in examining and publishing the information.
Among the documents were internal communications concerning Manchester City’s sponsorship arrangements and financial affairs, material that became an important part of the wider scrutiny surrounding the club.
The revelations did not stop with City. Football Leaks touched some of the biggest names and institutions in European football, including Paris Saint-Germain, Benfica, Porto and several high-profile players.
Pinto had effectively discovered that football’s most interesting stories were sometimes sitting in places where nobody outside the room was supposed to look.
SEE ALSO | Manchester City 115 Charges: Possible Punishments and Penalties Explained
How Did Rui Pinto Expose Manchester City?
The Manchester City connection goes back to Football Leaks material published by Der Spiegel and its investigative partners.
Journalists examining Pinto’s archive found internal emails and documents concerning City’s commercial arrangements, sponsorship income and the club’s attempts to operate within UEFA’s financial rules.
Christoph Winterbach, one of the Der Spiegel journalists involved in examining the material, later described a clear connection between the publication of the Football Leaks revelations and UEFA beginning its investigation into Manchester City.
That investigation eventually produced UEFA sanctions, although City’s two-year Champions League ban was overturned by the Court of Arbitration for Sport in 2020.
The Premier League process was separate and considerably longer.
Manchester City were charged by the Premier League in 2023 with 115 alleged breaches covering a nine-season period, with the case eventually heard by an independent commission.
The commission’s findings, published on September 29, 2026, were far more consequential for the Pinto story because the Premier League said the commission had upheld all of the financial-rule charges relating to the period in question, while also finding City guilty of three of four alleged failures to cooperate with the investigation.
According to the Premier League, the commission found that City had used “sham” commercial contracts, submitted misstated accounts and concealed the true state of its finances from auditors and football regulators.
City has consistently denied wrongdoing and has now appealed the ruling.
So when Pinto is described as the “hacker behind the Manchester City charges”, the phrase needs some care. His leaked material helped start the chain of investigation, while the Premier League’s eventual case was built and determined through its own legal process.
Is Pinto A Whistleblower Or A Criminal?
Pinto’s reputation becomes considerably more complicated once his own criminal case enters the fold.
In 2019, he was arrested in Budapest after Portuguese authorities issued a European arrest warrant connected to allegations including illegal access to computer systems, data theft, breach of correspondence and attempted extortion.
The case was not just about exposing football corruption.
One of the most important episodes involved Doyen Sports Investments, a football investment company whose systems Pinto had accessed.
Pinto obtained thousands of internal documents from Doyen and later attempted to obtain money from the company in connection with the information he possessed.
The prosecution’s case on Doyen was that he and a lawyer, Anibal Pinto, who shares his surname but has no family tie, who the reports mention, tried to obtain between €500,000 and €1m from the fund’s chief executive Nelio Lucas in exchange for withholding damaging material.
That episode became central to his prosecution.
In September 2023, a Portuguese court handed Pinto a suspended four-year sentence after finding him guilty of attempted extortion, illegal access to data and breach of correspondence.
Pinto has disputed aspects of the prosecution and has maintained that his wider Football Leaks activity served the public interest. He also acknowledged that attempting to obtain money from Doyen was a mistake and said he regretted it.
That is why describing Pinto just as either a heroic whistleblower or a criminal hacker misses the more uncomfortable reality.
He was both the source of material that exposed matters journalists and authorities considered important and a man who was himself convicted of criminal conduct connected to obtaining and handling information.
His legal record has also improved since.
A French court gave him a six-month suspended sentence in 2023 for hacking the emails of Paris Saint-Germain executives, but in April this year a second Portuguese trial ended with his acquittal on 241 counts of illegally accessing email accounts belonging to Portuguese sports bodies including Benfica, law firms, magistrates and the tax authority.
Al Jazeera reports the court found those charges invalid, so the man now being described as a hacker has been cleared of more counts than he has ever been convicted of.
Football, as usual, preferred a complicated story.
SEE ALSO | Who Gets Man City’s Titles if They Are Stripped?
What Else Did Rui Pinto Leak?
Manchester City was only one chapter.
Football Leaks published or supplied information concerning some of European football’s most powerful clubs and personalities, while Pinto’s activities eventually stretched beyond football.
The wider archive included material concerning tax arrangements involving players and other financial affairs that attracted major media attention across Europe.
Pinto was also linked to the Luanda Leaks investigation, which involved hundreds of thousands of documents concerning Isabel dos Santos, the Angolan businesswoman and former billionaire, and alleged financial dealings involving state resources and companies connected to her and her family.
Investigative journalists used the material to examine allegations of corruption, offshore structures and financial relationships.
The significance of these investigations was less about Pinto publishing every document himself and more about the information reaching journalists who could authenticate, contextualise and investigate it before publication.
That relationship between hacker, source and journalist became one of the defining features of the Football Leaks story.
Pinto could obtain information.
Journalists had to establish what it meant.
Authorities then had to decide whether there was enough evidence to investigate.
That distinction became especially important in the Manchester City case.
Was Rui Pinto Protected As A Whistleblower?
After his arrest and extradition to Portugal, Pinto became a cooperating source for investigators and was placed under witness protection in 2020.
His case created an unusual legal and ethical question.
European law provides protections for whistleblowers in certain circumstances, particularly where information exposes matters of public interest, although those protections do not automatically make unlawful methods of obtaining information legal.
Pinto’s situation therefore remained complicated.
He had been convicted of criminal offences, yet authorities also considered the information he possessed valuable enough to cooperate with him and protect him.
That tension has followed him throughout the Football Leaks saga.
The latest development came in September 2026, when Portuguese authorities ended his protected-witness status after years under protection.
The decision arrived only days after the Manchester City verdict and amid renewed attention surrounding Pinto and his public statements.
The Guardian reported that Pinto had been under witness protection since 2020 and had also been physically assaulted in April 2026. Portuguese police have assessed the current threat to his safety as low, although he has been advised to take precautions.
For someone whose identity once existed behind a pseudonym, public attention has become an unavoidable part of his life.
SEE ALSO | Manchester United Wage Bill 2026/27: All Players’ Salaries
What Does Pinto Have To Do With City’s 115 Charges?
This is where the story needs to be separated from internet myth.
Pinto did not personally establish all 115 Premier League charges, and the commission did not just accept Football Leaks documents as a ready-made verdict.
His disclosures helped journalists uncover information that prompted investigations by UEFA and later contributed to the broader scrutiny of Manchester City’s finances.
The Premier League subsequently conducted its own investigation and brought the charges in 2023.
The independent commission then examined the evidence presented in that process.
On September 29, 2026, the Premier League announced that Manchester City had been found guilty of the financial charges covering 2009/10 through 2017/18, along with three of four alleged failures to cooperate.
Manchester City has appealed.
That appeal is now the next major stage of the case, meaning the September ruling remains subject to the Premier League’s appeal process.
Pinto’s role, therefore, is best understood as the man who helped open the door.
He did not walk through every room himself.
Where Is Rui Pinto Now?
The answer, as of the time of writing this piece, October 2, 2026, is somewhere considerably less safe than he was a week ago.
The Guardian reported on Wednesday that Portuguese authorities have withdrawn his protected witness status, and local police assess the current threat to his safety as low, even though he was physically assaulted in Lisbon in April and left with a bruised eyebrow.
Portuguese media have reported that the special programme formally ends on 10 October, and that whether he keeps separate police protection may depend on a court decision.
Pinto has reportedly been advised not to return home, to avoid crowded places, and to be careful with family contacts and social media, which is a hard instruction for a man whose public profile has grown by the hour.
The timing could hardly be worse.
Within hours of the news, Pinto had used X to repeat a claim first aired in 2018, that Gianni Infantino, then UEFA general secretary, abused his authority in 2014, shared confidential documents and outmanoeuvred the investigatory chamber so that City and PSG would receive only fines instead of facing a deeper inquiry that could have led to a Champions League ban.
He called the FIFA president a cancer on football. Infantino has previously said that his work involves conversations and the exchange of documents, drafts and ideas on many issues, which is a reply that addresses the method without really answering the accusation, and nothing in the reporting so far shows him responding to Pinto’s latest post in detail.
Pinto then promised a major announcement for 18:00 UTC today, a few hours after City’s appeal deadline passed, and his teaser listed City, PSG, Barcelona, Negreira, UEFA, FIFA, Real Madrid, referees and Infantino in the same breath.
One outlet has given the time as 18:00 BST, but Pinto’s own post says UTC, so readers should check his feed rather than rely on either report. Nobody outside his circle knows what he will release, and anyone offering a confident prediction is guessing.
What can be said is that Pinto described the City verdict as a historic decision for English football that crowns his Football Leaks work, and the sentiment is hard to dismiss when a three-person commission with access to the evidence has upheld 114 charges.
It is equally hard to ignore that the man being thanked for it was convicted of crimes, has been left exposed by the state that protected him, and has chosen this moment to take on the president of FIFA.
A career spent being right in public has a way of making the next risk look affordable, and Pinto has never shown much interest in the safer option.
SEE ALSO | Ovie Ejaria: From Liverpool Debut at 18 to Searching for a Club on LinkedIn
Rui Pinto’s Complicated Legacy
There is something almost absurd about the route this story has taken.
A football-obsessed Portuguese computer enthusiast creates a website using a pseudonym, obtains confidential documents, passes material to journalists, becomes the subject of a criminal investigation, spends years under protection and eventually watches the information he helped expose become part of a Premier League case that has consumed English football for years.
Yet the simplest version of Rui Pinto’s story is also the least accurate.
He was not just a heroic whistleblower, because he was convicted of criminal offences involving illegal access to data and attempted extortion.
He was not just a hacker, either, because the information he obtained became the basis for investigations that went far beyond his own actions and exposed questions about football’s financial structures to millions of people.
Pinto opened a door that football had spent years keeping firmly shut.
What investigators, journalists and governing bodies found after walking through it is now part of the public record.
And with Manchester City’s appeal only beginning, the Rui Pinto chapter of the story may still have another few pages left to write.
