Old Trafford. Photo: Ank Kumar/Wikimedia Commons, CC0. Cropped.
I’ve shared season tickets before.
The funny part is, they weren’t even for my team.
My family is from Detroit. We’re Lions fans. But living in Indianapolis, we had access to Colts season tickets, and my relationship with them was almost entirely practical.
We had tickets to football games.
Sometimes we went. Sometimes someone else did.
I never really thought much beyond that. If we couldn’t use the tickets, someone else could. It felt pretty simple.
Then I started reading about Manchester United’s latest fight over season tickets.
The club has spent months trying to crack down on ticket touting, using account activity and digital patterns to identify what it believes are organised networks abusing the ticketing system.
Supporters agree that touting is a problem.
The argument is over what happens when the same patterns used to find a tout also resemble the way ordinary supporters have managed tickets for years.
That was what caught my attention.
My own experience with season tickets had always felt straightforward. We had them, we used them, and sometimes we shared them.
But the deeper I looked at what was happening at United, the less straightforward any of it became.
This wasn’t really just a fight about who could use a ticket anymore. It was becoming a fight about what a club could reasonably conclude from the way supporters used them.
And that left me with a different question than the one I started with.
When does a pattern become proof?
The Problem United Was Actually Trying to Solve
Manchester United did not invent the problem.
Ticket touting is real, organised and profitable, and the club has spent years trying to identify fake accounts, automated purchasing, coordinated networks and tickets being resold outside its official system.
In some cases, the scale is hard to ignore.
United said one device connected to its ticketing system had accessed 1,088 separate accounts.
That is not a family helping each other with tickets.
It is exactly the sort of activity you would expect the club to investigate.
United’s wider anti-touting work had already been moving in that direction. The club had previously reported thousands of sanctions linked to false identities, bots and suspicious ticket activity, while also blocking tickets it believed had been obtained or controlled through abusive systems.
So when United began looking more closely at account behaviour in 2026, the logic was fairly straightforward.
If organised touts were controlling large groups of supposedly independent supporter accounts, looking for unusual concentrations of activity made sense.
The club said the average ticket holder accessed around 1.2 accounts from a single device.
Its investigative threshold was set at seven or more accounts.
That did not mean seven accounts automatically made someone a tout.
According to United, it meant the activity was unusual enough to warrant a closer look.
And that distinction is important.
A pattern could tell the club where to investigate.
It could not, by itself, explain what had happened.
When Normal Starts to Look Suspicious
And that is where the system began to run into football supporters being football supporters.
United’s investigation was built to identify unusual patterns.
The problem is that unusual does not always mean dishonest.
Supporters had been sharing account access with family and friends for years. Someone might manage tickets for an older parent. A parent might control a child’s account. A group of friends might rely on one person to handle applications or ticketing because that was simply how they had always done it.
From the outside, those arrangements can look messy.
From inside the group, they can feel completely normal.
That became a problem because some of the same activity United was trying to identify in organised touting networks could also appear inside legitimate supporter networks.
One of the more striking cases involved a six-year-old season-ticket holder whose account was restricted after being linked to activity across a much larger group of accounts.
The point is not that United believed a six-year-old was personally running a ticket operation.
It is that the account was being managed by someone else.
And once one person begins managing multiple accounts, the digital pattern can look very different from the relationships behind it.
A supporter sees:
my dad.
my son.
my mate.
the person in our group who sorts the tickets.
The system sees:
Account A. Account B. Account C. One device.
Neither description is necessarily wrong. They are simply describing the same activity from completely different perspectives.
United later acknowledged that it had underestimated how common username and password sharing was among genuine supporters.
That matters, but not because it proves the investigation was illegitimate.
It doesn’t.
It means the club discovered that one of the behaviours it considered potentially suspicious was also more deeply embedded in ordinary supporter culture than it had appreciated.
And once that became clear, the question changed.
The issue was no longer whether unusual activity deserved attention.
It was what United needed to establish after finding it.
When Suspicion Became a Fight About Evidence
By July, the argument had moved beyond whether United should investigate suspicious activity.
Supporters were asking a narrower question:
What should happen after the pattern is found?
On July 18, the Manchester United Supporters Trust made that distinction explicit.
MUST was not arguing that analytics were illegitimate. In fact, it described the use of sophisticated data to identify suspicious activity as sensible.
The concern was what came next.
A pattern might justify scrutiny.
It should not, by itself, become a conviction.
That became the center of the dispute.
Supporter representatives argued that severe sanctions should require corroborating evidence. They wanted clearer explanations of what conduct was actually being alleged, written reasons for decisions, and a process that separated organised commercial activity from ordinary supporter networks that happened to leave similar digital fingerprints.
By July 21, more than 100 supporter groups had backed the Fans’ Forum position.
Again, the disagreement was not really about whether professional touts should be stopped. It was about the standard required before a supporter could lose access to something they may have held for years.
That distinction can get lost quickly when the argument is reduced to “United cracking down on touts” versus “fans angry about ticket bans.”
The actual dispute was much narrower.
United had found a signal.
Supporters wanted to know what evidence came after it.
Through the rest of July, that argument sharpened. Supporter representatives pushed for a clearer separation between intelligence and proof, the issue was escalated to the club’s chief executive, and by the July 30 Fans’ Forum meeting, ticketing sanctions had become one of the dominant subjects of discussion.
The principle being argued for was simple enough:
Use data to find the cases worth investigating.
Then use evidence to decide what actually happened.
That sounds obvious.
In practice, it is much harder.
If one device touches seven accounts, that may tell you something unusual is happening.
It does not tell you whether the person behind it is a commercial tout, a parent, a friend helping an older supporter, or simply the person in a group who has always handled the tickets.
That is why July matters.
The fight was no longer about whether United had the right to look.
It was about how far suspicion could take the club before it became something strong enough to punish.
What Changed After July
By August, United’s language had become more specific.
The club acknowledged that it had underestimated how common account-sharing was among legitimate supporters. It also accepted that the investigation had caused distress and left some fans feeling unfairly treated.
That did not mean United abandoned the crackdown.
It meant the club had to draw the line more carefully.
United later said season tickets would only be confiscated where there was evidence of organised touting, systematic misuse, or activity for financial gain.
That is a much narrower standard than simply identifying unusual device activity, and it separates two stages that had become blurred in the public argument:
detection and judgment.
Unusual activity might be enough to ask questions.
It should not necessarily be enough to answer them.
That distinction helps explain why so many individual cases became contested.
Some supporters provided explanations that United ultimately accepted. Others received reduced sanctions or warnings. Some sanctions remained in place.
MUST’s own tracking suggested that a significant number of outcomes changed during the appeal process, although the Trust was careful to say its figures were still provisional and should not be treated as a final error rate.
That caveat is important.
An overturned sanction does not automatically prove the original suspicion was unreasonable. A reduced sanction does not necessarily mean no breach occurred. And supporters who approached MUST were not a random sample of everyone investigated.
Still, the fact that individual review changed outcomes tells us something.
Context mattered.
The system could identify unusual behaviour.
It could not always establish what that behaviour meant without looking more closely.
That may be the clearest lesson from the dispute.
United was right to look for organised abuse.
Supporters were right to ask what evidence separated organised abuse from behaviour that merely resembled it.
The difficult part was everything in between.
What a Pattern Can’t Tell You
I started with a much simpler question.
If you paid for a season ticket, what exactly did you buy?
That was the part that caught my attention because of my own experience. We had access to Colts season tickets even though we were Lions fans, and I had always thought about them in the most practical way possible.
If we weren’t using them, someone else could.
Simple.
But the United dispute pushed the question somewhere else.
As ticketing moved deeper into digital systems, the club gained the ability to see things supporters may never have thought of as meaningful data.
Who logged in.
From what device.
How many accounts were connected.
Who forwarded what.
What looked ordinary inside a family or group of friends could look very different when reduced to a pattern on a screen.
That does not make the data useless.
Some patterns were extreme enough that they clearly demanded investigation.
But the dispute showed the limit of what those patterns could establish on their own.
A device can tell you that seven accounts were connected.
It cannot tell you why.
That still requires context.
Manchester United has a responsibility to protect supporters from people exploiting scarce tickets for profit.
It also has a responsibility to distinguish those people from supporters whose behaviour merely resembles them from a distance.
Those responsibilities do not cancel each other out. They make the job harder.
So I’m not sure this is really a story about whether United was right or wrong to crack down.
The club was right to look.
Supporters were right to ask what happened after it looked.
A pattern can tell you where to start.
It should not always be allowed to tell you where to finish.
When does a pattern become proof?
Research & References
This article draws upon Manchester United’s ticketing policies and supporter communications, Manchester United Supporters Trust statements, Fans’ Forum reporting, Football Supporters’ Association material, and contemporary reporting to examine the club’s anti-touting investigation and the dispute over how suspicious ticketing activity should be interpreted.
Where appropriate, hyperlinks throughout the article direct readers to the original club statements, supporter-group material and reporting used during the research process. Particular attention was given to distinguishing what Manchester United said its systems identified, what supporter groups argued those patterns did and did not prove, and what changed as individual cases were reviewed.
What do you think?
Using data to identify suspicious ticket activity makes sense.
But when the same patterns can also appear inside ordinary supporter networks, what should a club need to establish before suspicion becomes punishment?