Evolution Files investigation challenges claims of full clearance

The Evolution Files: 501 pages, 27 chapters and why “Evolution was cleared” was never the full story

Malta Media’s five-year investigation does not declare Evolution guilty of every allegation or Black Cube right about everything. It reconstructs the record, including the newly public Spectrum report and shows why the simple victory narrative does not survive a full reading of the documents.

I did not set out to write 501 pages about Evolution. Nobody sane does that. The project started with a much simpler question: why did the same issues keep returning after the original complaint was supposedly finished? The answer was not one perfect bombshell. It was a five-year trail of reports, regulator letters, court filings, test results, company statements and technical records that never quite fitted into the tidy version offered by either side.

The finished report is called The Evolution Files. It contains 27 chapters divided into six parts, beginning with the origins of the dispute and ending with a country-by-country, operator-by-operator evidence map and a final assessment. It examines Black Cube, Playtech, the New Jersey regulator, Spectrum Gaming Group, repeated analyst testing, the British enforcement case, the technology behind the supply chain and the financial questions created by ringfencing. It is the largest single editorial project Malta Media has completed.

There is an obvious temptation with a report of this size. Put the strongest allegations in the headline, throw in a few dramatic screenshots and call the job finished. That would be easier, quicker and probably better for traffic. It would also be irresponsible, especially while litigation remains active and several of the most serious allegations have not been decided by a court.

This report takes the slower route. A regulator finding is called a regulator finding. A court order is called a court order. A party filing remains a party filing. Analyst testing is not presented as Malta Media fieldwork and technical access is not quietly converted into proof of senior-management knowledge.

The report nobody planned to write

The modern story began in November 2021, when an anonymous investigative report was submitted to gambling regulators in New Jersey and Pennsylvania. The report alleged that Evolution content was accessible through operators serving prohibited and sanctioned jurisdictions. It also raised questions about cash, cryptocurrency, KYC, anti-money laundering controls, player-location information and the use of intermediaries.

Evolution rejected the allegations as false, misleading and defamatory. The market did not wait for a regulator or judge to reach a conclusion. Reuters reported that around $3 billion was wiped from Evolution’s market value in one day, while Bloomberg later put the weekly decline above SEK96 billion. The reputational process took hours. The regulatory and legal process would take years.

That gap between instant damage and slow verification is one reason the story became so difficult to report. A headline could move billions before the public had seen the underlying evidence. A later legal or regulatory result could then be presented as a complete vindication, even when it answered only one part of the original case. The public was repeatedly asked to choose between two slogans: Evolution was exposed, or Evolution was cleared.

Neither slogan was good enough for us. The evidence did not support a clean conviction narrative. It did not support a clean exoneration narrative either. The deeper we went, the more obvious it became that access, authenticity, contractual approval, technical control, corporate knowledge and legal liability were separate questions.

The commissioner was eventually named

For almost four years, the company behind the original investigation was not publicly known. That changed through discovery in the New Jersey litigation. Playtech was identified as the client that had commissioned Black Cube, and Playtech confirmed that a subsidiary had retained a business-intelligence firm to investigate concerns about Evolution.

Evolution described the work as a defamatory smear campaign intended to damage a competitor. Playtech rejected that characterisation and said the investigation concerned legitimate questions about Evolution’s business practices. Those remain opposing corporate positions. The court has not converted either company’s press release into a final finding.

Later court material added another layer. A sworn affidavit from Black Cube director Dr Avi Yanus described an initial project price of £750,000 and milestone payments linked to evidence, major-media use, official investigations and possible licence loss. Those terms are relevant because they create an obvious incentive question. They do not prove that evidence was fabricated, just as the existence of a video does not prove every legal conclusion attached to it.

This distinction matters. A competitor can have a commercial reason to investigate a rival and still uncover something real. It can also select, frame or escalate genuine material in a way that serves the client’s interests. Motive changes the level of scrutiny. It does not decide the truth by itself.

New Jersey did not give either side the clean answer it wanted

The New Jersey Division of Gaming Enforcement closed its investigation in February 2024. Evolution had every right to emphasise the favourable part of that outcome. The Division said it could not confirm that Evolution content had been offered in a jurisdiction it considered prohibited under its own framework, and it found no evidence that Evolution sanctioned, promoted, permitted or materially benefited from the evasion it examined.

That was a significant result. It materially limited what could responsibly be claimed about the 2021 dossier. It did not support saying that the New Jersey regulator found Evolution knowingly operating in sanctioned markets. It did not support describing player cryptocurrency deposits as cryptocurrency paid directly to Evolution.

The same letter, however, did not describe the earlier compliance environment as satisfactory. The regulator’s summary of Spectrum’s work recorded limited onboarding due diligence, insufficient continuing review, a 25% ownership threshold that could miss warning signs and inadequate VPN blocking in some circumstances. It listed substantial changes, including recurring customer checks, stronger contractual controls, deeper review of customer KYC programmes, updated jurisdiction lists, technical improvements and a Compliance Committee.

This is the part that disappeared whenever the word “cleared” was used without qualification. New Jersey did not confirm the central prohibited-market allegation under the standard it applied. It also agreed that Evolution had lacked strong compliance procedures and required the improved system to remain under review. Both propositions sit in the same official record.

Malta Media previously examined the December disclosure fight and the June 2026 case-management orders. Both were important, but neither was a final merits judgment on whether every statement in the Black Cube report was true or false. A discovery order tells us what must be produced. It does not tell us what the produced evidence will ultimately prove.

Then Evolution’s own Spectrum report became public

As The Evolution Files reached the publication stage, the factual record moved again. On 8 September 2026, a New Jersey filing placed the Spectrum Gaming Group report into the public court record. Spectrum had been retained by Evolution to examine the original allegations, and for years the public debate had relied mainly on the New Jersey regulator’s summary and the parties’ competing descriptions.

The newly disclosed text does not hand either side a complete victory. Spectrum said it was able to corroborate accusations concerning the availability of Evolution games in Hong Kong, Singapore, the United Arab Emirates and Saudi Arabia. It described investigators placing bets and playing games through operators using IP addresses associated with those jurisdictions. It also said certain clients had provided the content in breach of their contractual restrictions.

Spectrum went further on monitoring. It said Evolution did not conduct sufficient ongoing review of customers and sub-licensees to determine whether they were complying with regulatory and territorial terms. It connected that lack of verification to games remaining accessible in territories prohibited by contract, and it said Evolution received revenue from operators providing games in the four named markets.

That is not a small footnote. It directly complicates any suggestion that Spectrum simply disproved the Black Cube investigation. It also strengthens one of the central themes running through our 501 pages: the B2B model creates real distance from the player, but it does not remove the supplier’s responsibility to understand and monitor the downstream route.

The balance is equally important. Spectrum said the allegations concerning Syria and Iran were unsupported under its work and reported that attempts to access the games from those locations were repeatedly denied. It also said it found no evidence that Evolution received cash payments from B2B customers, and it could not determine the payment method used by every end user in the sessions examined. Black Cube was therefore not validated across the board.

This is exactly why Malta Media refuses to turn the story into team sport. The Spectrum report supports parts of the original market-access and compliance case. It rejects or fails to substantiate other serious allegations. The document must be read as a whole, not as a collection of quotations selected by whichever litigant is speaking that day.

The August edition of The Evolution Files was completed before this disclosure. A dated update will therefore be added before the full report is distributed as the final publication edition. That is not an embarrassment. It is what responsible reporting looks like when a live court record changes after 501 pages have already been assembled.

The evidence did not stop in 2021

The reason this investigation grew so large is that the underlying question did not end with the original dossier. From January 2025, Redburn Atlantic and later Rothschild & Co Redburn published a series of tests covering named operators, country-specific VPN routes, interactive game sessions, cryptocurrency-funded operator accounts and technical domains associated with the live-game window. That second phase turned a historical dispute into a live evidence problem.

The Asian work included operators linked in the analyst material to South Korea, Thailand, Vietnam, Malaysia, Japan and China. In selected cases, the analysts reported funding accounts, placing wagers and playing Evolution titles. They also published CNAME records connecting named operator brands to evo-games.com or evonetworks.net subdomains.

Those observations are stronger than a casino lobby screenshot. They can support that a route reached supplier-related infrastructure and, where a wager was placed, that the game behaved as an interactive product. They still do not identify the complete commercial chain or prove that Evolution directly contracted with every visible website.

Europe added another layer. In May 2025, Redburn reported that Evolution content remained available through at least one tested offshore route in 20 of the EU’s 27 member states, while seven countries were blocked. The operator sample expanded in July, yet the country-level result remained the same. Later tests in October and January again produced the same broad map, although individual operator routes moved beneath it.

That persistence matters, but it must not be overstated. A green country result meant at least one route succeeded. It did not mean every operator was open, every session was authorised or every country had the same legal framework. Spain, for example, could remain marked available because one route survived, while Italy showed a much broader set of successful routes.

The strongest European comparisons showed different suppliers producing different results inside the same operator environment. In France and Italy, some competitor content was visibly restricted while Evolution games remained accessible under the analyst’s test conditions. That demonstrates that supplier-level restriction was technically possible. It does not establish why the contracts, configurations or decisions differed.

The technical question beneath the headlines

Evolution’s strongest defence has always started with a fact that this report accepts. Evolution is a B2B supplier. It does not normally open the player’s casino account, perform the operator’s player KYC, hold the wallet or process the player’s deposit and withdrawal.

That does not mean the supplier disappears once the player clicks a game. Company documentation reproduced and analysed by Redburn described a launch process involving operator or integration casino keys, short-lived API tokens, hostnames and whitelisted technical endpoints. The player could remain connected to the operator for the wallet while connecting to Evolution infrastructure for the live game.

This divided architecture is the heart of the investigation. The operator controls important parts of the player journey. An aggregator may control part of the commercial distribution. Evolution controls or influences important elements of game authentication, server access and product restriction.

Control is not knowledge. A system can receive information without a named executive seeing it. A customer can breach a contract after onboarding. A valid technical credential can be misused or passed through a longer chain than the supplier expected.

The reverse is also true. A long supply chain cannot become an automatic answer to every recurring route if central authentication, customer credentials and supplier-side restrictions exist. The correct questions are practical: who held the key, which domains were approved, what territories were permitted, what data reached the system, what alert was generated and what happened after somebody saw it?

This is less dramatic than saying “Evolution knew everything” or “Evolution controlled nothing”. It is also much harder to dismiss. The public record is strongest on access, persistence and technical control points. It is weaker on the internal bridge from system capability to organisational knowledge, management decision and revenue attribution.

Britain turned a recurring risk into a regulator finding

The UK Gambling Commission settlement in July 2026 changed the frame. This was not a Black Cube allegation, an analyst theory or a disputed court filing. The Commission found five genuine Evolution games on six websites operated by two unlicensed businesses and accessible at scale to consumers in Great Britain.

The regulator found weaknesses in Evolution’s anti-money laundering risk assessment, customer due diligence and oversight of customers and sub-licensees. It said the controls were not effective enough to identify and prevent the supply of games through unlicensed websites. The outcome included a £4.75 million regulatory settlement, a licence variation and an independent audit. The Commission said the failings were serious enough for it to consider suspending Evolution’s licence.

The Commission also recorded mitigation. Evolution acted after notification, blocked the identified routes, cooperated with the investigation and strengthened its controls. Evolution said the two operators had actively evaded restrictions and breached their supply terms, and that both commercial relationships were terminated. The company also said the review found no broader pattern of unlicensed UK access.

Both sides of that outcome matter. The British case does not retrospectively prove that every 2021 country allegation was true. It does prove that genuine Evolution content reached unlicensed British-facing sites through companies with which Evolution had commercial relationships, and that the regulator found the supplier’s control environment inadequate during the relevant period.

That moves the subject beyond a theoretical argument about whether downstream exposure could happen. It happened in a defined case. The six websites and two businesses were not publicly named, and the wider operator route remains undisclosed. The remaining question is how broadly the lesson travels across the rest of the supply chain.

What the 501 pages actually cover

Part I reconstructs the origin of the controversy, the anonymous 2021 report, the regulator response and the technical question of control. It asks why the same issue kept returning, what New Jersey actually decided and where responsibility sits when a player-facing operator, an aggregator and a game supplier share one session. It is the foundation for everything that follows.

Part II moves into Asia. It covers the first modern testing programme, China, Hong Kong and Singapore, then the wider network involving Thailand, Vietnam, Malaysia and Japan. Each country is treated separately because the evidence is not equal. A funded session, a country-labelled technical route and an interview allegation do not carry the same weight.

Part III examines European ringfencing. It follows the 20-open and seven-blocked country pattern, then moves into Germany, France, Italy, Spain, Malta, Portugal and the recurring offshore operator network. The point is not to count green ticks. It is to show how country rules, operator blocks, supplier restrictions and changing integration routes produced a patchwork.

Part IV follows the technology and the money. It separates company-reported results from analyst estimates, examines the financial effect attributed to ringfencing, looks at the Tracksino raw-feed route and tests what the cyberattack explanation can and cannot account for. The report does not convert a target price or analyst model into a legal finding.

Part V covers sanctioned-market allegations, Tier 1 reporting, the New Jersey litigation, the UK Gambling Commission, Nevada’s new B2B standard, competitor incentives and investor risk. It is where the legal, reputational and commercial consequences meet. It is also where the temptation to overstate motive becomes most dangerous.

The financial analysis builds on Malta Media’s earlier examination of why favourable procedural outcomes did not remove the investor discount. A court victory can narrow one branch of legal risk while leaving questions about revenue durability, control effectiveness and future licensing untouched. Investors are not required to deliver a verdict before pricing uncertainty.

Part VI brings the record together. It maps what Evolution changed, identifies the documents still missing, builds the country-by-country and operator-by-operator evidence matrix and states the final conclusion. There is no dramatic leap from screenshot to criminal liability. Every conclusion keeps its evidentiary limit attached.

What the report concludes

The final answer is not that Evolution was fully cleared. It is not that Black Cube’s 2021 report was proved in full either. New Jersey did not confirm the core prohibited-market allegation under its own standard, but it recorded a compliance framework that required material strengthening.

Evolution has genuine distance from the player account, wallet and direct KYC relationship. It also operates technical, contractual and commercial control points inside its supply environment. The British regulator later confirmed a defined failure in which genuine games reached unlicensed sites through two customers.

The evidence beyond those official outcomes is substantial but uneven. It shows recurring access, named operators, technical routes, patchwork restrictions and questions that did not disappear after the first review. It does not, for most markets, provide the complete contract, internal alert, management decision and revenue trail needed to establish knowing approval or legal liability.

That is the line Malta Media will not cross without evidence. We do not claim that every displayed game was authorised. We do not claim that senior management knew about every country session. We do not treat every unregulated market as legally prohibited. We do not claim that Playtech, Black Cube, other suppliers, operators or media organisations formed a wider coordinated scheme where the documents do not show one.

The strongest defensible criticism is more precise. The combined record supports serious questions about recurring supply-chain control, customer mapping, contract monitoring and transparency. The case is strongest where player journeys, technical routing, supplier comparison and regulator findings converge. It is weakest where access is used as a shortcut to infer intent.

Why we are not putting 501 pages on an open server

We are not going to dump a 501-page PDF onto the homepage and pretend that doing so completes the journalism. Most readers will not work through it, search engines will strip pieces from context and screenshots will circulate without the qualifications that make them defensible. That would create noise, not understanding.

Instead, Malta Media will publish a six-part editorial series based on the report’s six sections. Each article will isolate the strongest evidence, show the relevant documents and explain what the material establishes and where it stops. The articles will link back to one permanent Evolution Files landing page so the chronology remains usable.

The complete PDF will be available by request after final legal and copyright sign-off. Readers, regulators, lawyers, analysts and industry participants who want the full report can contact me directly at ms@malta-media.com and send me their WhatsApp number. The report will be supplied as a complete document so that no chapter, screenshot or quotation has to be read without its context.

Evolution was being offered advance access so the company can identify specific factual errors and provide an on-record response. That does not provide an editorial veto, an approval right or a power to delay publication indefinitely. Fairness means giving the subject a genuine opportunity to answer, which Evolution did not!

The publication series starts here

This launch article covers the first part of the report in short: the origins, the New Jersey record and the supply-chain question. The next article will move into Asia and the first modern testing programme. It will show why Hong Kong, Singapore and China cannot be treated as one allegation, then examine the named routes across Thailand, Vietnam, Malaysia and Japan.

The third article will follow the European ringfence. The fourth will examine technology, raw feeds, cyberattack explanations and the money. The fifth will deal with the litigation and regulatory consequences, including the Spectrum dispute, British enforcement, Nevada, competitor incentives and investor risk.

The final article will publish the report’s overall findings and evidence boundaries. It will identify what can now be stated firmly, what remains strongly supported but disputed and what still requires internal records or a final judicial decision. That conclusion will not satisfy anybody looking for a simple hero and villain. It is not supposed to.

Our final thoughts

Evolution has spent five years arguing that the original report was false, defamatory and commercially motivated. Black Cube has spent the same period arguing that its evidence was real and that Evolution used favourable language from regulators and consultants to avoid the underlying questions. Playtech’s commissioning role is now documented, while Evolution’s own Spectrum report has become part of the public record.

The new Spectrum disclosure does not prove every Black Cube allegation. It is more awkward than that. It supports important parts of the market-access and compliance case, rejects or does not substantiate serious sanctions and payment claims and exposes how badly the public debate was served by selective summaries.

That is why The Evolution Files exists. Not to repeat one side’s dossier. Not to rewrite the other side’s press release. Not to call an analyst a regulator or a procedural order a verdict.

The report asks a simpler and much more uncomfortable question. After five years of litigation, regulatory review, new testing, new controls and a major British settlement, what does the combined record actually show? The answer runs to 501 pages. We will now publish it properly.

FAQs

What are The Evolution Files?
The Evolution Files is Malta Media’s 501-page investigation into five years of allegations, regulatory findings, litigation, analyst testing and technical evidence involving Evolution. It contains 27 chapters divided into six parts.

Was Evolution fully cleared of the allegations against it?
No. The investigation concludes that the available record does not support saying Evolution was fully cleared, but it also does not establish that every allegation made against the company was proven. The evidence varies significantly depending on the allegation and jurisdiction.

What did the New Jersey investigation find about Evolution?
The New Jersey Division of Gaming Enforcement said it could not confirm that Evolution content had been offered in jurisdictions prohibited under its framework and found no evidence that Evolution sanctioned, promoted, permitted or materially benefited from the evasion examined. However, the regulatory record also identified compliance weaknesses that required improvements.

What did the Spectrum report find about Evolution games?
The Spectrum report said investigators were able to corroborate the availability of Evolution games in Hong Kong, Singapore, the United Arab Emirates and Saudi Arabia. It also identified weaknesses in ongoing customer and sub-licensee monitoring.

Did the Spectrum report support every Black Cube allegation?
No. Spectrum said allegations concerning Syria and Iran were unsupported under its investigation and reported unsuccessful attempts to access the games from those locations. It also found no evidence that Evolution received cash payments from B2B customers.

What role did Playtech have in the Evolution investigation?
Court discovery identified Playtech as the client that commissioned Black Cube. Playtech confirmed that a subsidiary had retained a business-intelligence firm to investigate concerns about Evolution’s business practices.

What did the UK Gambling Commission find about Evolution?
The UK Gambling Commission found five genuine Evolution games on six websites operated by two unlicensed businesses and accessible to consumers in Great Britain. The regulator also identified weaknesses in anti-money laundering risk assessment, customer due diligence and oversight of customers and sub-licensees.

How much was Evolution required to pay in the UK regulatory settlement?
Evolution Malta Holding Limited agreed to a £4.75 million regulatory settlement following the UK Gambling Commission investigation. The outcome also included a licence variation and an independent audit.

Why is Evolution's B2B model important to the investigation?
Evolution operates as a B2B supplier and generally does not manage the player's casino account, wallet, deposits or direct player KYC. However, the investigation identifies technical and contractual control points involving game authentication, server access, customer credentials and product restrictions.

How will Malta Media publish The Evolution Files?
Malta Media plans to publish a six-part editorial series based on the six sections of the investigation. The complete 501-page report is intended to be available by request following final legal and copyright review.