MGA Suspicious Betting Reports Reveal Tight Risk Controls

The Malta Gaming Authority (MGA) released a 23-page thematic review on 27 October 2026 that examined why some licensees filed very few suspicious betting reports after new reporting rules took effect in 2025. The regulator concluded that a low count of reports does not, by itself, indicate that operators are failing to monitor their markets. Instead, the review traced the figures mainly to tight risk management practices such as restrictive stake limits, conservative market offerings, and the removal of events judged especially open to manipulation, including certain youth competitions. The MGA said these choices cut exposure to integrity threats in the first place.

Many operators depend on external integrity monitoring bodies. In those setups, internal investigations typically began only when a third-party partner raised an alert. A quiet feed from the partner meant fewer cases for the operator to report. The review also found that some groups with licences in several jurisdictions had not realised that suspicious activity involving players on their MGA licence also had to be reported to Malta. The MGA corrected that view during the engagements.

Every licensee in the sample had some form of escalation process, but the regulator noted big differences in how formal those processes were. Written policies rarely spelled out the role of the Key Compliance Function, even though that person handled reporting and liaised with the MGA in practice. Some firms explained their workflow verbally in meetings but had not documented the route from detection to report. Training and market suspension practices were also missing from policy documents in some cases.

The regulator praised real-time monitoring tools, close cooperation between risk, trading and compliance teams, and checks designed to stop athletes and other sports personnel from betting on their own events. The MGA wants monitoring to pair automated alerts with human oversight, including for operators that depend on a B2B provider’s feed.

Licensees told the authority they wanted clearer guidance on what counts as suspicious activity, along with thresholds. The MGA acknowledged the feedback but said it prefers an open approach, arguing that rigid thresholds could deter firms from passing on information that still deserves review. Operators also floated a central register of professional athletes; the regulator said this falls outside its remit, but that sports associations may want to look at the idea.

Integrity monitoring has been a busy area this year, with seven World Cup markets flagged for suspicious betting during the summer. The MGA said it will track progress through ongoing supervision and use the review when setting future guidance and supervisory priorities.

Operators that limit stake sizes and remove high-risk events reduce the potential for large payouts, which can dampen player excitement and revenue. However, tighter controls may also lower the risk of large losses for the operator and reduce the likelihood of regulatory penalties. Players who prefer high-volatility markets may find their options narrowed, while those seeking safer betting environments may benefit from stricter oversight.

Operators should review their written escalation policies to ensure the Key Compliance Function’s role is clearly documented and that training and market suspension procedures are included. They should also evaluate whether their reliance on third-party monitoring is creating blind spots and consider supplementing it with internal checks. Finally, operators should monitor the MGA’s future guidance, as the regulator plans to use this review to shape supervisory priorities.