Rui Pinto: The Hacker Behind Manchester City's Downfall Loses Witness Protection

Portuguese whistleblower Rui Pinto, the man whose massive document leaks helped trigger the Premier League investigation into Manchester City, has lost his protected witness status in his home country. The development, confirmed on Wednesday, marks another dramatic turn in the extraordinary life of a self-taught hacker who rose from obscurity to become one of the most consequential figures in modern football governance.

Pinto, 37, founded the website Football Leaks in 2015 under the pseudonym "John," operating in the shadows to expose what he described as "the principal protagonists in the dishonest football industry." His leaks ultimately provided the documentary foundation for the Premier League's case against Manchester City, which was found guilty this week of all but one of 115 charges related to financial misconduct rules.

The timing of the decision to revoke Pinto's protection is notable. It came just days after Manchester City's verdict, in which the league determined that the club used "sham" commercial contracts to artificially inflate revenues and reduce costs by more than 900 million pounds ($1.2 billion), with secret funding from its Abu Dhabi-based owners. The club denies wrongdoing and is expected to appeal by Friday, with potential sanctions ranging from a fine to expulsion from the league.

Born and raised in Vila Nova de Gaia, near Porto, Pinto showed an early aptitude for computing despite never receiving advanced education in the field. His school geography teacher later recalled him as "very good in computers" and expressed surprise when he was identified as Football Leaks' founder in 2019. That surprise was understandable: Pinto had built a network capable of accessing some of the most closely guarded financial secrets in world football.

His early work focused on Portuguese clubs Benfica and FC Porto, but his ambitions soon extended far beyond his home country. Between 2016 and 2018, Pinto leaked more than 70 million confidential documents to newspapers within the European Investigative Collaborations consortium. Those documents exposed the salaries of Lionel Messi and Neymar, brought global attention to a rape allegation lawsuit involving Cristiano Ronaldo—later dismissed by a United States judge—and revealed the inner financial workings of clubs, players, and organisations across the sport.

Pinto's methods, however, also brought legal consequences. He was arrested in Budapest in January 2019 on a European court order for alleged attempted extortion and cybercrimes, then extradited to Portugal that March. He remained in pre-trial detention until April 2020. In September 2023, a Portuguese court handed him a four-year suspended sentence for illegally obtaining documents, committing other cybercrimes, and attempted extortion. A separate trial in France that same year resulted in a six-month suspended sentence for hacking emails belonging to Paris Saint-Germain executives.

Yet Pinto's legal fortunes have been mixed. In April 2026, a second Portuguese trial ended with his acquittal on 241 separate counts after the court ruled the charges were "invalid." The decision represented a significant vindication for a man who has consistently framed his actions as public interest whistleblowing rather than criminal enterprise.

Pinto's relationship with Portuguese authorities has been complex and, at times, deeply fraught. He became a protected witness in August 2020 after agreeing to grant authorities access to millions of files gathered before his arrest. His first trial began a month later. According to reporting by the BBC, he has at various points been held in solitary confinement, under house arrest, and in witness protection. Those conditions underscore the personal toll of his decision to expose football's financial secrets.

The Guardian reported on Wednesday that Portuguese police now deem Pinto's safety risk to be low, despite the fact that he was assaulted in April. Authorities have advised him to "exercise caution with family contacts" and to avoid social media—guidance that seems unlikely to be followed, given Pinto's increasingly vocal public profile. The revocation raises questions about whether a whistleblower who has exposed billion-dollar financial schemes can ever be genuinely safe once formal protections are withdrawn.

Since Manchester City's verdict last week, Pinto has been characteristically outspoken. He described the outcome as a "historic decision for English football" and delivered a scathing assessment of the club's conduct. "From the very beginning, they have demonstrated a complete lack of respect for the rules, for the bodies responsible for overseeing and regulating the game, for the integrity of the competition, for the other clubs and, above all, for the fans," he wrote on X. "Years and years of cheating, lying and manipulation will finally have consequences."

Just hours before his protection was revoked, Pinto also targeted FIFA President Gianni Infantino, calling him "a cancer on football" who "should have no place in the future of the game." The comment signals that Pinto intends to remain a disruptive voice in football governance, even without the institutional cover of protected witness status.

Pinto's legacy now rests on a paradox. He is a convicted hacker whose methods violated laws in multiple countries, yet his leaks formed the evidentiary backbone of the most significant financial misconduct case in Premier League history. UEFA also launched a separate investigation into Manchester City based on the same material. Whether history remembers Pinto as a criminal or a crusader may depend less on court rulings than on how football's governing bodies ultimately respond to the corruption his leaks exposed. For now, the whistleblower who spent years in confinement and protection finds himself once again exposed, speaking loudly, and facing an uncertain future.