What should organisations do first when they need to assess money laundering exposure in football?

Map the money flows before you map the controls

The first useful step is to build a transaction map of where money actually moves, who touches it, and which flows can be justified by normal football operations. That means separating routine revenue from higher-risk paths such as club purchases, transfers, intermediary fees, media-rights payments, and ticketing channels that can be distorted by shell entities, inflated valuations, or unusual counterparties. A map gives you a baseline for where exposure is concentrated, not just where policy says the risk should be.

In practice, this is less about a complete enterprise-wide review and more about finding the paths that can carry the largest value with the least natural friction. Once you can see those routes, you can test the ownership trail, the payment trail, and the valuation trail against each other and identify where scrutiny must be tightened first.

Why football creates distinct laundering pressure points

Football is attractive for laundering because several legitimate payment types can absorb subjective pricing, fragmented counterparties, and cross-border movement. Player transfers may involve agents, third parties, image-rights arrangements, and staged payments; club acquisitions can hide beneficial ownership behind layered companies; and commercial revenue streams can be used to move funds through opaque sponsorship or media arrangements. Those characteristics do not prove abuse, but they do make weak controls easier to exploit.

The right baseline therefore looks for where value can be introduced, shifted, or disguised with the fewest immediate alarms. If a flow depends heavily on reputation, valuation judgement, or counterparties that are hard to verify quickly, it deserves earlier review than a routine operating expense with clean provenance.

That is why initial assessment should focus on the points where money, ownership, and justification intersect. If the organisation cannot explain why a transfer fee, acquisition price, or agency payment is consistent with market evidence and documented approvals, the exposure is already material enough to warrant deeper testing.

What a practical first-pass assessment should produce

The first pass should produce a risk-ranked inventory of flows, counterparties, and control breaks. For each high-value stream, document who approves it, how it is valued, what evidence supports the amount, whether beneficial ownership has been checked, and whether the payment path is segregated from the people who can originate or sign off the deal. That gives you a working view of where due diligence, independent review, and audit trails need to be introduced first.

A useful output is a short list of transactions that are both high value and hard to verify. Those are usually the places where the organisation should demand stronger source-of-funds checks, clearer ownership disclosure, documented rationale for valuation, and tighter exception handling before attempting broader remediation across all football operations.

For the policy backdrop, the international AML baseline set out in the FATF Recommendations is the clearest external reference for customer due diligence, beneficial ownership, and suspicious transaction handling. For organisations that want a broader control catalogue to structure ownership, audit, and access to financial evidence, the NIST SP 800-53 Rev 5 Security and Privacy Controls control families provide a practical control vocabulary.

Risk and Threat Considerations

Money laundering exposure in football is rarely concentrated in one obvious weakness. The main risk is that large, legitimate-looking payments can conceal weak ownership checks, inflated valuations, or intermediaries whose role is not well controlled, allowing illicit funds to enter or circulate with minimal friction.

Failure mechanism: The organisation fails to trace the highest-risk money flows end to end, so the same transaction can be approved on reputation or commercial logic even when ownership, payment source, or valuation evidence is incomplete.

Impact: That creates a blind spot where suspicious funds can be layered through club deals, transfers, or sponsorship-style payments, increasing regulatory exposure, financial crime risk, and the chance that later controls will only catch the problem after the money has moved.

Practitioner Guidance

What to prioritise: Start with the flows that combine high value, subjective pricing, and opaque counterparties. If a transaction can move large sums while relying on a limited paper trail, treat it as a first-wave review candidate rather than waiting for a full programme redesign.

What to verify: Confirm that each high-risk flow has a clear owner, an independent valuation check, and a documented source-of-funds or source-of-wealth rationale where the transaction depends on it. If any one of those three is missing, the control gap is already operationally significant.

Practitioner takeaway: The first task is not to “fix AML” everywhere, but to identify where football money can move fastest with the weakest evidence, then harden those routes before expanding to lower-risk activity.

Related resources from NHI Mgmt Group

• Should organisations prioritise external exposure or internal credential governance first?
• What do organisations get wrong when they try to prevent money laundering manually?
• What should organisations do first when they are trying to improve exposure management at scale?
• When does secret exposure become a broader identity risk?