Two systems, and why cases fall between them
Manipulation of a sporting event can be dealt with in two ways, and they operate on different evidence, different standards and different timescales.
Sporting discipline. The governing body applies its own rules to participants under its jurisdiction. The standard of proof is typically the civil one, as in tennis, where a corruption offence must be established by a preponderance of the evidence, or a sport-specific formulation such as comfortable satisfaction, which the World Anti-Doping Code defines as greater than a mere balance of probability but less than proof beyond a reasonable doubt. Evidence includes betting data, communications, witness testimony and the participant's own account. Sanctions range from fines to lifetime bans. The process can be fast.
Criminal law. The state prosecutes conduct that is an offence: fraud, bribery, corruption, or a sport-specific offence where one exists. The standard is the criminal one. Evidence must be admissible. Compulsion powers exist that the sport does not have. Sanctions include imprisonment. The process is slow and the threshold high.
Most cases that produce an outcome produce a sporting one. Criminal prosecution is rare, and it is rare because the evidence a betting pattern provides establishes that a market behaved abnormally, not that a named person committed an offence to the criminal standard.
The gap between the two is where cases go to die. A pattern strong enough to concern everyone, a participant the sport cannot sanction without more, and a prosecutor who will not act on betting data alone.
The sporting route in practice
A governing body's disciplinary process typically runs: information received, from an operator, a monitoring company or an insider; preliminary assessment; investigation, including interviews and requests for data; charge under the sport's rules; hearing before an independent panel; sanction; appeal, frequently to the Court of Arbitration for Sport or a national equivalent.
Three features matter for anyone feeding information into it.
Jurisdiction depends on the participant's status. A registered player, official or licensed agent is bound by the sport's rules. A bettor with no connection to the sport is not, and the sport can do nothing about them.
The sport can compel its own participants. Rules typically require cooperation, including provision of phones and communications, and refusal is itself a breach: tennis's programme, for example, lets investigators demand a player's mobile phones, laptops, messages and bank statements, and treats a failure to cooperate as a corruption offence in its own right. This is the sport's substitute for the compulsion powers it lacks against outsiders.
Betting data is evidence, not proof. Panels have accepted betting patterns as part of the picture and have generally looked for more before sanctioning. In the 2016 Skënderbeu case, the Court of Arbitration for Sport called UEFA's betting fraud detection reports valuable evidence, but said that to conclude a match was fixed the analytical information needs to be supported by other, different and external elements pointing in the same direction. The cases that succeed usually pair the betting with something from inside: communications, a confession, an insider's account, or a pattern of conduct across events.
The criminal route
Where criminality is alleged, the picture changes.
The offence varies by jurisdiction. Some countries have a specific sports manipulation offence. Others prosecute under general fraud, bribery or corruption law, with varying fit. A few have no clear route at all. In Great Britain, section 42 of the Gambling Act 2005 makes cheating at gambling an offence, including interference with an event to which gambling relates, punishable by up to two years' imprisonment on indictment.
Betting data requires a lawful basis to obtain and use. Operators cannot simply hand account data to police on request in most frameworks. A production order, a data protection lawful basis, or a regulator acting as intermediary is usually required, and operators need to know their route before a case arises rather than during one. In the UK, for instance, data protection law disapplies some of the usual rules where applying them would be likely to prejudice the prevention, investigation or detection of crime, an exemption that applies only to the extent that the usual rules would prejudice those purposes, so the operator should assess each request, and record its reasoning, rather than treat it as a blanket permission.
The Macolin Convention, the Council of Europe Convention on the Manipulation of Sports Competitions, is the international instrument addressing manipulation of sports competitions. It requires each party to identify a national platform, facilitate information sharing and make sure its law can criminally sanction manipulation involving coercive, corrupt or fraudulent practices. It came into force on 1 September 2019, and by September 2026 17 states had ratified it; the United Kingdom signed in 2018 but has not ratified. Its practical effect depends entirely on national implementation.
Cross-border cases are the norm. The participant is in one country, the bettors in several, the operators licensed in others, and the organisers somewhere else. Mutual legal assistance is slow and the practical result is that organised networks are rarely prosecuted while participants sometimes are.
Where the operator sits in a case
The operator's role is defined and it should stay inside it.
Provide data under proper process. To the regulator as required, to the sport under the reporting framework, to law enforcement under a lawful basis. Record every disclosure.
Preserve evidence. Once a pattern is reported, the betting records, account data and communications should be retained beyond ordinary retention periods, because a disciplinary hearing may be years away.
Give evidence if required. An integrity analyst may be asked to explain the betting pattern to a panel or a court. The record made at the time is what makes that possible.
Do not investigate the sport. Contacting participants, clubs or officials to establish what happened is not the operator's function, and it risks prejudicing the actual investigation.
Do not pre-judge in public. Statements that a match was fixed, before any body has found that it was, expose the operator to defamation risk and undermine the process.
Standards of proof, and why they matter to you
An operator's integrity report will be read against whichever standard the recipient applies, and understanding that shapes what to send.
A regulator assessing whether the operator met its reporting obligation asks whether it passed on what it knew or suspected. In Great Britain, betting licensees must report, as soon as reasonably practicable, information they know or suspect may relate to an offence such as cheating, and give the sport's governing body, where it is one listed in the Act, relevant information they know or suspect may relate to a breach of its betting rules. That is a low bar and the report should meet it plainly.
A sport deciding whether to charge asks whether the evidence could satisfy its panel. Betting data contributes; it rarely suffices alone.
A prosecutor asks whether a court is likely to convict. In England and Wales the Code for Crown Prosecutors asks whether there is a realistic prospect of conviction, meaning a court is more likely than not to convict, where a court may only convict if it is sure of guilt. Betting data almost never gets there by itself.
The consequence: write the report to the regulator's standard, describing the betting fully and accurately, and let the recipients with higher standards decide what it supports. A report written as though it proves manipulation overclaims for every reader.
The participant's position
Worth understanding, because it shapes what evidence emerges and how.
A participant approached to fix may be in financial distress, may have been approached through someone they trust, and may have been asked for something small and deniable. The first request may not even look like corruption. Once the first act has occurred, leverage exists, and refusal becomes harder.
Reporting obligations exist in most sports, and the Macolin Convention asks states to encourage them: a participant approached must report the approach. In tennis, a player asked to influence an event or supply inside information must report it to the integrity agency as soon as possible, even if no money is offered. Compliance is often low, because reporting means admitting the contact, and because participants fear both the approacher and the sport's reaction.
This matters for the operator in one specific way. A betting pattern is frequently the only thing that surfaces a case at all, because nobody inside the sport reported anything. The operator's report may be the first the sport hears of it, which is why timeliness matters and why the report should be written to be useful rather than merely to discharge an obligation.
Sanctions, and what they achieve
Sporting sanctions for manipulation are severe: bans measured in years, up to life, plus fines. Tennis, for example, allows permanent ineligibility and fines of up to $250,000 plus any winnings from the offence. Criminal sanctions where obtained include custody.
Their deterrent effect is real and bounded. Participants in the vulnerable tiers may have little to lose from a ban and much to gain from a payment. Organisers are rarely reached at all. This is the argument for prevention over enforcement that the next lesson develops: detection and sanction address the participant, and the participant is the most replaceable part of the enterprise.
Resolution from the operator's side
A case reaches an end for the operator when: the pattern was explained and the alert closed with the explanation recorded; or a report was made and acknowledged and no further information was requested; or the sport or a court reached a finding, which determines whether voiding and settlement decisions stand; or the matter was closed by the recipient without a finding.
Each of these is a legitimate outcome. What is not legitimate is an integrity file with no resolution recorded, which means the operator cannot say what happened to the thing it reported.
Following up matters for a reason beyond tidiness. The outcomes of reported cases are the feedback that calibrates the function: which patterns turned out to be real, which were explained, and what the recipients found useful. A function that reports and never learns the outcome is reporting blind, and it will report the same explainable patterns next season.