There is a version of whistleblower protection that sounds reassuring on paper and falls apart entirely in practice. Rui Pinto, the man whose hacked football files triggered the biggest financial misconduct case in Premier League history, found out his witness protection was ending not when the decision was actually made, but 83 days later, with just 10 days to spare before it lapsed. The timing of that notification, landing on 30 September, the day after Manchester City's Premier League guilty verdict dominated front pages across the world, was either an extraordinary coincidence or something considerably worse. Either way, it tells you a great deal about how Portugal's justice system has treated the person who handed it one of the most significant document caches in European football's history.

The Decision They Sat On

The key facts here are stark and worth sitting with. Portugal's special security programmes commission, the body known as CPES, convened on the 8th and 9th of July to review Pinto's case. They assessed the threat level against him, concluded it was low, and determined that his special protection measures were no longer warranted. That is a significant call to make about a man who has been inside a witness protection programme since 2020. It is the kind of decision you would expect to trigger immediate, careful communication with the individual at the centre of it.

Instead, the CPES sat on that decision for 83 days. Pinto was not told until 30 September. His lawyers were not heard before the decision was reached. His circumstances, his cooperation with multiple European justice systems, his continued willingness to assist British authorities, none of it appears to have been factored in before the commission signed off. That is not a bureaucratic delay. That is a failure of process so complete it raises questions about whether the process was ever truly designed to protect him at all.

Ten Days to Sort Your Life Out

Think about what 10 days' notice actually means in practice for someone in Rui Pinto's position. He needs to find somewhere safe to live. He needs to work out how to support himself financially in a new location. He needs to do all of this while maintaining distance from family members, because contact with them carries its own risks. These are not administrative inconveniences. These are the basic conditions of a person's safety, and the Portuguese state gave him a week and a half to arrange them.

His lawyer, Francisco Teixeira da Mota, put it plainly: the most shocking element is that Pinto was not heard before the decision was made. Da Mota has said this contravenes the European Court of Human Rights. That is a serious legal claim, and it did not come from nowhere. Pinto's defence team has described the withdrawal of protection as "an act of state terrorism," which is the kind of language you deploy when you believe the system has stopped pretending to be on your side. The revelation that their client was kept in the dark for nearly three months intensified that fury considerably.

What City's Verdict Has to Do With It

The 30 September notification date deserves more scrutiny than it has received. The Premier League confirmed its guilty verdict against Manchester City on 29 September. The following day, when that story was dominating every sports page and broadcast on the planet, Pinto was told his protection was expiring. The CPES had known since July. They chose that moment to tell him.

We are not alleging conspiracy here. But the optics are genuinely extraordinary. The man whose documents were central to the City investigation, who remains willing to cooperate with British authorities and whose files, passed to French investigators, can now be shared with the UK under international agreements, was stripped of his state protection precisely as the case he helped build reached its most visible moment. If the timing was accidental, it was a spectacular failure of institutional awareness. If it was deliberate, it is something much uglier.

The Minister's U-Turn and What It Reveals

What happened after the notification became public is equally telling. Portugal's justice minister, Rita Alarcão Júdice, was confronted by journalists and found herself promising a review of the decision. She said she had received various requests and was examining them carefully. She offered a deadline of this Saturday, the date Pinto's protection was originally set to end, to respond. That is a minister scrambling, not governing.

The fact that political pressure produced a rethink within days is a pointed illustration of how flimsy the original process was. If the commission's July decision was sound, if the evidence base for withdrawing protection was solid and the procedure was followed correctly, then a few days of press coverage should not be enough to shake it. That it apparently has been tells you the decision was either poorly made, poorly documented, or both. The CPES was contacted twice by the Guardian for details of its criteria and evidence, and once more to explain the 83-day gap. It did not respond to any of those enquiries.

What This Means for Cooperation

Beyond Rui Pinto's immediate safety, this episode sends a message to every potential whistleblower watching from the outside. Portugal offered protection in exchange for cooperation. Pinto delivered millions of files. Those files have been used by judicial, tax and sporting authorities across Europe. The [Premier League's case against City](/uprise/football/football-daily-klopp-xavi-zidane-mancini-big-nations-ready-to) drew on his disclosures. French investigators now hold documents that can be shared with the UK under international cooperation frameworks. The value of what Pinto provided is not in dispute.

What is in dispute is whether the state held up its end of the arrangement. His lawyers argue, reasonably, that the authorities should weigh his ongoing cooperation with justice systems and the continuing risks that come from his disclosures before pulling the protection rug. An appeal was being filed this week. Whatever the legal outcome, the reputational damage to Portugal's witness protection framework is already done. Anyone sitting on a cache of documents and wondering whether to come forward now has a very clear recent example of what cooperation can cost you.

The Verdict

The 83 days are the number that will define this story. Not because bureaucratic delays are unusual, they are not, but because in this case the delay was not administrative drift. It was a commission making a decision about a man's safety and then telling him nothing for nearly three months, leaving him to find out with 10 days to rearrange his entire life. The CPES has offered no explanation. The minister has offered a review. Pinto's lawyers have filed an appeal and used the words "state terrorism." The Guardian asked the commission to justify itself three times and received silence.

This is a story about institutional cowardice dressed up as procedural decision-making. Rui Pinto handed Portuguese authorities access to some of the most consequential football documents in European history. In return, they gave him 10 days' notice and 83 days of silence. That is not how a state treats someone who trusted it. And the people in football who benefited from those documents, from the Premier League investigation down, should be paying close attention to what Portugal just did to the man who made it all possible.