What was Operation Offsides and what did it achieve?

Operation Offsides is an enforcement action led by the National Intellectual Property Rights Coordination Center, resulting in the seizure of nearly 400 domains used for illegally streaming FIFA World Cup matches. This operation marks one of the largest sports piracy enforcement actions to date.

How many domains were seized during the 2026 World Cup compared to the 2022 Qatar tournament?

Nearly 400 domains were seized during the 2026 World Cup, which is roughly five times the amount taken down during the 2022 Qatar tournament.

Why is the 2026 World Cup a prime target for pirates?

The global popularity of the 2026 World Cup, which is being co-hosted by the U.S., Canada, and Mexico, makes it a prime target for pirates.

What kind of malicious content was found on illegal sports-streaming sites?

According to a 2021 Webroot analysis, 92% of illegal sports-streaming sites carried some form of malicious content, typically delivered through ad networks that fund the operations.

US Seizes 400 Domains for Illegally Streaming FIFA World Cup Matches

Q: Which international partners were involved in Operation Offsides?

Operation Offsides was coordinated with international partners through the International Computer Hacking and Intellectual Property (ICHIP) Network of U.S. prosecutors, targeting servers and domains in Peru, Bulgaria, Croatia, Romania, Poland, and Colombia.

The US Department of Justice led a global operation to seize nearly 400 domains offering unauthorized live streams of the 2026 World Cup, marking one of the largest sports piracy enforcement actions.

The US Department of Justice has announced the seizure of nearly 400 domains used for illegally streaming FIFA World Cup matches, marking one of the largest sports piracy enforcement actions to date. The operation, dubbed "Operation Offsides," was led by the National Intellectual Property Rights Coordination Center alongside Homeland Security Investigations, with a seizure warrant filed in the Eastern District of Virginia.

What Happened

The seized domains were used to offer unauthorized real-time streams of 2026 World Cup matches as they are being played and first broadcast. According to an affidavit in support of a seizure warrant, HSI special agents confirmed that the seized domains were actively broadcasting World Cup matches without authorization. The action was coordinated with international partners through the International Computer Hacking and Intellectual Property (ICHIP) Network of U.S. prosecutors, targeting servers and domains in Peru and Bulgaria, as well as in Croatia, Romania, Poland, and Colombia.

The operation is notable for its scale, with nearly 400 domains seized – roughly five times the amount taken down during the 2022 Qatar tournament. The takedown also highlights the global nature of sports piracy, with FIFA, beIN Media Group, NBCUniversal, the Motion Picture Association's Alliance for Creativity and Entertainment (ACE), Ultimate Fighting Championship (UFC), and Warner Bros. all providing leads to identify the offending domains.

Background and Context

The 2026 World Cup is being co-hosted by the U.S., Canada, and Mexico, giving U.S. authorities firmer jurisdiction than they held when the event was held in Qatar. The tournament's global popularity has made it a prime target for pirates, with many using dynamic domain rotation tactics to quickly switch to new domains following takedown actions.

A 2021 Webroot analysis of illegal sports-streaming sites found that 92% carried some form of malicious content, typically delivered through ad networks that fund the operations. Following the 2024 World Cup, Microsoft Threat Intelligence traced a December 2024 maladvertising campaign that reached nearly 1 million devices back to illegal streaming sites.

Why it Matters

The seizure of these domains is significant for several reasons. Firstly, it highlights the importance of respecting intellectual property rights and enforcing copyright laws. The operation also underscores the responsibility of host nations like the U.S. to protect international events from criminal activity.

Furthermore, the takedown serves as a warning to viewers who may be tempted to access unauthorized streams. As Special Agent in Charge Eric Weindorf noted, "When you open your network to illegal streaming sites, you're taking a significant risk." These streamers not only violate copyright laws but also expose viewers to potential threats – including malware attacks and unsecure connections that can compromise personal and financial data.

What Comes Next

The operation is part of an ongoing effort by law enforcement agencies to disrupt international piracy networks. As Assistant Attorney General A. Tysen Duva highlighted, "We have seized hundreds of domains, used to illegally stream World Cup matches for profit, to disrupt the international networks that profit from the global popularity of the World Cup."

The takedown also raises questions about the effectiveness of domain seizures as a tool against operations that rotate addresses and fall back to redundant copies. As noted in the sources, enforcement bodies often suddenly pounce on hundreds of domains at once rather than one at a time.

Key Facts

Nearly 400 domains used for illegally streaming FIFA World Cup matches were seized by the US Department of Justice.
The operation, dubbed "Operation Offsides," was led by the National Intellectual Property Rights Coordination Center alongside Homeland Security Investigations.
The seized domains were used to offer unauthorized real-time streams of 2026 World Cup matches as they are being played and first broadcast.
The takedown is part of an ongoing effort by law enforcement agencies to disrupt international piracy networks.
Special Agent in Charge Eric Weindorf warned viewers that accessing unauthorized streams poses significant risks, including malware attacks and unsecure connections.