FIFA claims there were no suspicious bets at the World Cup, international network recorded seven alerts
Following the conclusion of the 2026 World Cup, FIFA announced that its Integrity Task Force had identified no suspicious activity in betting markets or indications of possible match-fixing across the 104 matches. Just one day later, the Group of Copenhagen, an international network of national platforms operating within the framework of the Council of Europe's Macolin Convention, presented a significantly more cautious picture of the tournament's monitoring. According to its report, seven cases reached the level of a yellow alert, 15 matches were placed under enhanced monitoring, and 12 major controversies were assessed from the perspective of risks to the integrity of the competition. None of these figures proves in itself that any match was manipulated, but they show that certain odds movements, betting offers or other information required additional verification.
The difference between the two announcements raised the question of how institutions that cooperated within the same monitoring system could present seemingly different conclusions to the public. On 21 July 2026, FIFA stated that, based on all the data collected and analysed, it had found no suspicious betting linked to any match. On 22 July, the Council of Europe announced that the Group of Copenhagen had triggered seven yellow alerts during the same tournament and additionally monitored 15 matches, particularly in the final round of the group stage. Since the names of the matches, the reasons for individual alerts and the final outcomes of the checks have not been made public, it is currently impossible to determine whether all the initial signals were subsequently explained or whether some assessments remained open.
Two reports do not necessarily mean two opposing truths
At first glance, the claim that there was no suspicious activity is difficult to reconcile with the information about seven yellow alerts. However, systems for protecting integrity distinguish between an initial signal, an operational alert, a suspicion requiring investigation and proven manipulation. A yellow alert in the Group of Copenhagen system may be triggered by an irregular betting pattern, unusual odds movements or unverified information from the media, social networks, forums and other sources. Such a designation requires the collection of additional data, contact with relevant stakeholders and documentation of the conclusion, but it does not mean that a criminal offence, disciplinary violation or match-fixing has been established.
In its final assessment, FIFA applied a higher threshold: it announced that the material analysed as a whole had shown neither suspicious betting activity nor indications of potential manipulation linked to a specific match. It is therefore possible that the national platforms registered anomalies during the championship, but that these received a legitimate explanation after verification and did not reach the level of a final suspicion. It is equally possible that the two structures use different terminology, timeframes or methodologies for public reporting. The problem is that neither announcement provides sufficient detail for the difference to be fully reconstructed.
It is also important that the Group of Copenhagen did not operate outside FIFA's system. The Council of Europe states that its operation was conducted in coordination with FIFA's Integrity Task Force, whose members include both the Council of Europe and the Group of Copenhagen itself. FIFA stated that during the tournament it centralised betting-monitoring reports, data from task-force members and information received through the available reporting channels. This means that these were not two completely separate monitoring operations, but different levels of the same broad international mechanism, with the national platforms also carrying out their own risk assessments.
Fifteen matches were under enhanced monitoring
The 2026 World Cup was the first edition with 48 national teams and 104 matches, played in Canada, Mexico and the United States from 11 June until the final on 19 July. The expanded format brought more matches, more markets and more data that had to be processed in real time. According to the Council of Europe, 14 national platforms from a network comprising more than 45 members from every continent participated in the Group of Copenhagen operation. Their task was to identify and assess risks that could affect the integrity of the competition.
The national platforms monitored betting markets, odds movements and the removal of individual offers from betting systems. They used data from open sources and information from social networks, while the operation also made it possible to monitor persons who had previously been linked to suspicions of manipulating sporting competitions. Of all 104 matches, 15 were subjected to an enhanced monitoring regime. The Council of Europe particularly highlighted the final round of the group stage, a period in which qualification for the knockout phase, group rankings and possible calculations concerning the next opponent are decided simultaneously.
In addition to the seven yellow alerts, experts also analysed 12 major controversies from an integrity perspective. The official announcement does not specify which events were involved or whether they were linked to refereeing decisions, player behaviour, market movements or information from outside the pitch. The absence of such information protects the confidentiality of operational checks and individuals who might otherwise be unfairly exposed, but at the same time limits the possibility of independently assessing the quality of the monitoring. The public therefore knows how many alerts were recorded, but not what triggered them or how they were resolved.
What the yellow alert level means
The Group of Copenhagen system uses several levels of notification, ranging from green through yellow and orange to red. According to the Council of Europe's operational guidelines, the yellow level concerns initial indications such as irregular betting patterns, unusual odds movements or unverified information from public sources. It is a signal that the case should be further documented and that information should be exchanged with selected partners. After more detailed verification, the incident may be returned to the green level, meaning that the anomaly has been explained, or it may be raised to a higher level if more persistent and credible indications emerge.
For that reason, seven yellow alerts cannot be presented as seven cases of match-fixing. Such an interpretation would be unfounded and could unfairly associate players, referees or teams with manipulation for which there is no evidence. At the same time, the alerts are not insignificant: they show that automated systems, betting operators, national authorities or analysts could not immediately explain certain changes. Their purpose is precisely the early identification of risks, before any potentially suspicious activity develops into a more serious case.
The key distinction is therefore not between a "clean" tournament and seven proven manipulations, but between the operational process and the final public assessment. FIFA published the result of its final analysis, while the Council of Europe also released part of the data showing how many times the system reacted during the competition. Without information on whether each yellow alert was subsequently closed, downgraded to green or forwarded to another competent authority, the two announcements cannot be fully compared.
FIFA points to broad international cooperation
FIFA's Integrity Task Force included representatives of all continental football confederations, the football associations of the host countries, police and judicial institutions, and organisations specialising in betting monitoring. Its members included the FBI, Interpol, the United Nations Office on Drugs and Crime, the United States Department of Justice, Sport Integrity Canada, the Council of Europe, the Group of Copenhagen, the International Betting Integrity Association, United Lotteries for Integrity in Sports, and several technology and analytics companies. According to FIFA, this composition enabled the rapid exchange of intelligence, the assessment of alerts and a coordinated response throughout the championship.
FIFA Senior Integrity Manager Liam Rich assessed that the task force had provided a strong framework for information exchange and timely action. The organisation announced that cooperation would continue at future tournaments, including youth competitions in 2026 and the 2027 Women's World Cup. Nevertheless, the official statement does not explain how many alerts were received in total, how many required additional analysis or how the final assessment that there had been no suspicious activity was reached. It was precisely this lack of comparable data that created the impression that the two reports contradicted each other.
Prediction markets and micro-bets open a new area of risk
During the World Cup, the Group of Copenhagen continuously monitored prediction markets for the first time. Such platforms allow users to trade on the outcomes of events, often in a way that is functionally similar to betting, but which is treated differently in legal terms from traditional bookmakers in certain jurisdictions. The Council of Europe warns that users can open positions on a very wide range of events, sometimes anonymously or pseudonymously, using payment methods that are more difficult to trace. Due to the cross-border nature of these markets, identifying users and collecting evidence may be more complex than with licensed domestic operators.
The risk is no longer limited to the final result of a match. Offers may concern cards, corners, fouls, substitutions, individual actions or other events that do not necessarily change the winner. Such micro-bets create the possibility of so-called spot-fixing, the manipulation of a limited segment of play that is easier to control than the final result. The mere availability of such markets does not mean that fraud has occurred, but it increases the number of potential points that integrity systems must monitor.
The broader conflict between FIFA and the Council of Europe became visible even before the final reports were published. Council of Europe Secretary General Alain Berset, in an open letter published on the day of the final, criticised the expansion of betting on individual events within a match and called for a new integrity-protection framework before the 2030 World Cup. His intervention was politically significant because FIFA and the Council of Europe have had a memorandum of cooperation since 2018 covering human rights, integrity and good governance in sport. The final figures on yellow alerts further emphasised the need for the partners to explain more clearly how they define suspicious activity and when they consider an operational signal to have been resolved.
The Macolin Convention establishes the framework, but implementation depends on data exchange
The Group of Copenhagen operates as a network of national platforms linked to the Macolin Convention, the only internationally legally binding instrument specifically dedicated to the manipulation of sporting competitions. The Convention entered into force on 1 September 2019 and requires public authorities to cooperate with sports organisations, regulators and betting operators in preventing, detecting and sanctioning manipulation. National platforms are designed as central hubs bringing together the police, judiciary, betting regulators, sports federations and other relevant stakeholders.
Such a model is particularly important because the money, the event, the bettor and potential intermediaries may be located in different countries. An unusual payment may be registered in one jurisdiction, the match played in another, the platform registered in a third, and the user hidden behind an account or digital means of payment. Without rapid access to data on identity, the time of the payment, the type of market and connections between accounts, the initial anomaly may remain merely a statistical signal. This is precisely why the alert system serves the standardised and secure exchange of information before a decision is made on whether grounds exist for a formal investigation.
The names of the matches have not been published, and key answers remain confidential
Neither FIFA nor the Council of Europe identified the 15 matches placed under enhanced monitoring, nor did they state which matches were covered by the seven yellow alerts. No data were published on the markets that triggered the reaction, the amounts wagered, the operators, the timing of odds movements or possible events on the pitch. Such discretion may be justified by the need to protect investigations, business information and individuals against whom no responsibility has been established. However, after the end of the tournament, the legitimate question remains whether at least an anonymised overview of the cases and the manner in which the assessments were concluded could be published.
The most important unresolved question is not whether the seven alerts constitute proof of match-fixing, because the official data do not confirm that. The question is how FIFA moved from a process in which operational signals were recorded to the final assessment that there had been no suspicious activity, and whether all partners accepted the same explanation. Until additional methodological details are published, it is only possible to conclude that the monitoring system did react, but that the joint task force did not find sufficient elements for a public claim of manipulation.
For confidence in future competitions, it will not be enough merely to announce that there is no evidence of match-fixing. It will be equally important to explain how many alerts were processed, which criteria were used, how many cases were closed and whether any information was forwarded to national regulators or law-enforcement authorities. FIFA and international integrity platforms must balance transparency with the need to protect confidential data. The 2026 World Cup demonstrated that a large volume of monitoring can simultaneously increase the security of a competition and raise new questions about what the public is entitled to know when the system registers an anomaly but does not establish manipulation.
Sources:
- FIFA – final statement by the Integrity Task Force on the monitoring of all 104 matches at the 2026 World Cup. (link)
- Council of Europe – review of the Group of Copenhagen operation, including data on seven yellow alerts, 15 matches under enhanced monitoring and 12 controversies analysed. (link)
- Council of Europe – explanation of the Macolin Convention and the international framework for combating the manipulation of sporting competitions. (link)
- Council of Europe – operational guidelines for the Group of Copenhagen alert system and the meaning of the yellow level. (link)
- FIFA – official schedule and basic information on the format, hosts and 104 matches of the 2026 World Cup. (link)
- The Guardian – report on the open letter from Council of Europe Secretary General Alain Berset and criticism of the expansion of betting markets during the World Cup. (link)