The department announced the action July 20, 2026. It said the seizures were carried out through three actions during the World Cup and were based on a seizure warrant filed in the Eastern District of Virginia.

What federal authorities seized

The domains were used to provide live access to World Cup matches without authorization, according to the Justice Department. The action affects sports viewers across the United States while the tournament’s matches are being hosted across the United States, Canada and Mexico.

The department’s announcement did not identify every seized domain. It also did not say whether any operators had been charged. The seizure of a domain is not, by itself, a conviction, and the Justice Department did not describe the operators as convicted criminals.

The department said nearly 400 sites had been seized by the end of the prior month. The total later cited in the announcement was more than 1,000 domains across the three seizure actions.

Investigation and rights protection

Homeland Security Investigations and the National Intellectual Property Rights Coordination Center investigated the sites. The warrant was filed in the Eastern District of Virginia, providing the legal basis identified in the department’s announcement for taking control of the domains.

FIFA, beIN Media Group and NBCUniversal provided assistance or supporting information, according to the Justice Department. The department also credited the Motion Picture Association’s Alliance for Creativity and Entertainment and UFC with providing assistance or information connected to the effort.

Unauthorized streams can undermine the rights held by official broadcasters and other authorized partners. In this case, the federal action directly involved streams of one of the world’s largest sporting events and the commercial distribution of its matches.

Security warning for sports viewers

The department warned that unauthorized streaming platforms may expose users to malware or the theft of payment information. That warning adds a consumer-security concern to the copyright and sports-integrity issues surrounding the sites.

The warning is a risk assessment, not a finding that every seized domain distributed malware. The announcement also did not establish that viewers had their personal or payment data stolen. Viewers should not treat the seizure announcement as evidence that every person who used one of the sites was harmed.

For consumers, the practical change is that the seized domains may no longer provide the streams they previously advertised. The announcement does not specify how long any disruption will last or identify what additional action, if any, will follow against the operators.

What remains unknown

The Justice Department’s release establishes the scale of the federal action but leaves several details unresolved. It does not list all of the domains, name the operators, state whether criminal charges have been filed or describe any prosecutions resulting from the investigation.

It also does not quantify how many people used the services or report any confirmed instances of malware infections or payment-information theft. The known action is the seizure of more than 1,000 domains, conducted in three actions during the 2026 World Cup, with federal officials warning users about potential risks associated with unauthorized streaming platforms.