MGA Sports Betting Integrity Review Finds Low Suspicious Betting Reports Reflect Tight Risk Controls
The Malta Gaming Authority's review of licensees filing few suspicious betting reports found tight risk controls but gaps in written escalation policies.
The Malta Gaming Authority (MGA) said on 27 October 2026 that licensees filing few or no Suspicious Betting Reports are often not missing match-fixing risks but managing them up front, with tight betting limits and cautious market selection. The finding comes from an MGA sports betting integrity review of how operators detect, assess and escalate integrity concerns, published as a 23-page thematic report alongside a short news release.
The MGA is Malta's gambling regulator, and its Sports Integrity Unit receives the reports that licensees must file. The review was a supervisory exercise, not an enforcement action: no licensee is named and no sanctions were announced.
Scope: who was reviewed and when
The MGA picked Authorised Persons (its term for licensees) that had filed few or no Suspicious Betting Reports since the reporting rules took effect. It did not publish how many firms were in the sample.
| Item | What the MGA says |
|---|---|
| Published | 27 October 2026 |
| Review period | Q2 2025 to Q4 2025, analysis afterwards |
| Sample | Risk-based; mix of B2B and B2C licensees |
| Number of licensees | Not disclosed |
| Methods | Supervisory meetings and reviews, submitted documents, follow-up questions |
| Presentation | Anonymized and aggregated |
Why reporting was low
The answer, according to the regulator, is mostly commercial and structural. The firms in the sample tended to cap stakes, offer a narrow range of markets and drop events with many vulnerable participants, including certain youth competitions. The MGA said it found low volumes "reflected the underlying risk management processes" rather than a lack of detection capability.
Two other causes were less reassuring. Many licensees leaned on external Integrity Monitoring Bodies, so their own investigations often started only after a partner raised an alert. And some groups licensed in several countries had not understood that suspicious activity involving players on their MGA license must be reported to Malta, even when it was also reported elsewhere. The MGA said it clarified that point with them.
Gaps in escalation and policies
Every licensee in the sample had some escalation route, typically from trading or risk staff to compliance, which usually decided whether to report. The quality of the paperwork varied widely.
- The Key Compliance Function, the person an MGA licensee must appoint to oversee compliance, often had no clearly written role in the process.
- Some workflows existed only verbally.
- Policies gave little detail on reporting timeframes, including cases where no financial harm occurred.
- Training, internal communication and market suspension practices described in meetings were often missing from written procedures.
- Terminology for external monitoring partners was inconsistent.
B2B suppliers depended on upstream platforms for data, and the MGA wants every licensee to have timely sight of betting activity, with automated alerts checked by people.
Good practice and recommendations
The firms that impressed the regulator used real-time monitoring, layered checks on risk signals before deciding to report, and close cooperation between trading, risk and compliance teams. Several screened customers to stop athletes and sports staff from betting on their own sport, using external databases, public information and direct questions to account holders.
The MGA's recommendations are practical rather than new rules: document the full path from detection to report, train staff, secure access to monitoring data, review policies regularly and talk to the regulator when in doubt. None of the sampled firms had a formal agreement with a sports governing body. The MGA does not require one but said such links could clarify roles.
Two operator requests were turned down. The MGA will not publish fixed thresholds for suspicious betting, arguing they could discourage reports on cases just below the line. And it called a central register of professional athletes outside its remit, though sports associations could explore one.
Malta's legal duty to report
The duty sits in Regulation 43 of the Gaming Authorisations and Compliance Directive (Directive 3 of 2018). Since 1 October 2021 it has also applied to firms providing a critical gaming supply for sports betting, and the Sports Integrity Unit now sends alerts on flagged events to licensees without naming its source. A March 2024 guidance paper sets out the detail.
Before the 2026 FIFA World Cup, the MGA told licensees on 5 June to report suspicious transactions "without delay," name a Sports Integrity Point of Contact and cooperate with the unit, warning that failure could lead to regulatory action. The volume of cases is significant: iGaming Capital, citing the MGA's quarterly integrity report, counted 68 suspicious cases in Q3 2025, with football and tennis making up most of them.
Other regulators publish similar data. The IBIA reported 63 suspicious betting alerts in Q1 2025, the Dutch KSA reported a drop in match-fixing cases, and Sportradar's 2023 integrity report tracked suspicious matches worldwide. Sweden's regulator has teamed up with the IBIA on betting integrity.
What it means for licensees
A low report count will not by itself trigger action, but licensees should expect the MGA to ask whether their controls are written down. The review fits a wider push on documented compliance that has seen the regulator cancel the Winzon licence and coincides with a new AML compliance era across Europe. The MGA says it will track progress through supervision and use the findings in future guidance, without giving a date.
Status reviewed on 29 October 2026. Findings and figures are from the MGA's release and report; the Q3 2025 case count is as reported by iGaming Capital. More regulation news and EMEA coverage.
Frequently asked questions
What did the MGA sports betting integrity review find?
The Malta Gaming Authority found that licensees filing few or no Suspicious Betting Reports were not necessarily failing to monitor their markets. In many cases they ran tight betting limits, offered conservative markets or avoided events seen as vulnerable to manipulation. The review also found gaps in written escalation procedures, training records and market suspension policies.
How many licensees did the MGA review cover?
The MGA has not published the number. Its report describes a risk-based sample of Authorised Persons with different operating models, including B2B and B2C licensees, chosen because they had filed few or no Suspicious Betting Reports. The supervisory meetings and document reviews took place between the second and fourth quarters of 2025, and findings are anonymized and aggregated.
Do Malta-licensed operators have to report suspicious betting?
Yes. Regulation 43 of the Gaming Authorisations and Compliance Directive (Directive 3 of 2018) requires licensees to report suspicious betting to the MGA. Since October 2021 the duty also covers B2B firms supplying sports betting services. The MGA's March 2024 guidance paper sets out the details, and failure to comply can lead to regulatory action.
Will the MGA set thresholds for suspicious betting?
No. Licensees asked for clearer definitions, risk factors and thresholds, but the MGA prefers an open approach. It argues that rigid thresholds could discourage firms from reporting cases that fall below a set line but still deserve review. Operators are expected to apply their own judgment, backed by documented procedures and human oversight of automated alerts.
What happens next after the MGA thematic review?
The MGA says it will follow up through its ongoing supervision of licensees and will use the findings to shape future guidance and supervisory priorities. It has not set a timetable. Licensees are encouraged to compare their own arrangements against the good practices in the report and to contact the Sports Integrity Unit with questions.
