The department announced the action July 20, 2026. It said the seizures were carried out through three actions during the World Cup and were based on a seizure warrant filed in the Eastern District of Virginia.

What federal authorities seized

The domains were used to provide live access to World Cup matches without authorization, according to the Justice Department. The action affects sports viewers across the United States while the tournament’s matches are being hosted across the United States, Canada and Mexico.

The department’s announcement did not identify every seized domain. It also did not say whether any operators had been charged. The seizure of a domain is not, by itself, a conviction, and the Justice Department did not describe the operators as convicted criminals.

The department said nearly 400 sites had been seized by the end of the prior month. The total later cited in the announcement was more than 1,000 domains across the three seizure actions.

Investigation and rights protection

Homeland Security Investigations and the National Intellectual Property Rights Coordination Center investigated the sites. The warrant was filed in the Eastern District of Virginia, providing the legal basis identified in the department’s announcement for taking control of the domains.

FIFA, beIN Media Group and NBCUniversal provided assistance or supporting information, according to the Justice Department. The department also credited the Motion Picture Association’s Alliance for Creativity and Entertainment and UFC with providing assistance or information connected to the effort.

Unauthorized streams can undermine the rights held by official broadcasters and other authorized partners. In this case, the federal action directly involved streams of one of the world’s largest sporting events and the commercial distribution of its matches.

Security warning for sports viewers

The department warned that unauthorized streaming platforms may expose users to malware or the theft of payment information. That warning adds a consumer-security concern to the copyright and sports-integrity issues surrounding the sites.

The warning is a risk assessment, not a finding that every seized domain distributed malware. The announcement also did not establish that viewers had their personal or payment data stolen. Viewers should not treat the seizure announcement as evidence that every person who used one of the sites was harmed.

For consumers, the practical change is that the seized domains may no longer provide the streams they previously advertised. The announcement does not specify how long any disruption will last or identify what additional action, if any, will follow against the operators.

What remains unknown

The Justice Department’s release establishes the scale of the federal action but leaves several details unresolved. It does not list all of the domains, name the operators, state whether criminal charges have been filed or describe any prosecutions resulting from the investigation.

It also does not quantify how many people used the services or report any confirmed instances of malware infections or payment-information theft. The known action is the seizure of more than 1,000 domains, conducted in three actions during the 2026 World Cup, with federal officials warning users about potential risks associated with unauthorized streaming platforms.

The seizures were carried out in three separate actions during the tournament. DOJ said nearly 400 domains had already been seized by the end of June, before the total rose above 1,000.

How the operation unfolded

The investigation was led by the Washington Field Office of U.S. Immigration and Customs Enforcement Homeland Security Investigations, or HSI, together with the National Intellectual Property Rights Coordination Center. The coordination center works on intellectual-property enforcement, and the operation focused on websites that the government alleged were being used to provide unauthorized access to World Cup broadcasts.

DOJ said the alleged conduct violated U.S. copyright law. The department’s announcement identified the domains as tools for illegally streaming FIFA World Cup final matches, but it did not provide a complete list of the domains or the people and organizations operating them.

The World Cup was hosted across the United States, Canada and Mexico. That geographic reach placed the tournament’s digital distribution across a North American market where online access to matches involved rights holders, streaming operators and viewers in multiple countries, while the federal seizure actions described by DOJ were conducted through U.S. agencies.

What the seizures mean

For sports-rights holders, the operation represents a direct federal response to unauthorized digital distribution during a major event. Broadcast and streaming rights depend on controlling how matches are distributed. Domains alleged to be carrying unauthorized streams can compete with authorized services and undermine the commercial arrangements that support those broadcasts.

For online viewers, the immediate documented consequence is that more than 1,000 domains identified by investigators were seized. The action also signals that federal investigators were monitoring unauthorized distribution during the tournament rather than treating sports streaming piracy as only a private dispute between rights holders and website operators.

The operation may also matter beyond soccer. A large, coordinated domain-seizure effort gives copyright owners and enforcement agencies a public example of how alleged digital piracy can be pursued across many websites at once. Future cases involving live sports, entertainment or other copyrighted programming could draw on the same enforcement approach, although the announcement does not say that any particular future case will follow.

What the announcement does not establish

DOJ’s release establishes that the government conducted the seizures and made allegations about the domains’ use. It does not establish that every operator was criminally convicted, that every domain independently generated commercial piracy revenue or that users of the sites were prosecuted.

The announcement also does not provide a complete accounting of the domains, their operators or any final court outcomes. It does not identify a further deadline or next proceeding. The known timeline is limited to the three seizure actions during the tournament, the nearly 400 domains seized by the end of June and the department’s July 20 announcement that the total had exceeded 1,000.