Where pirated video lives, and why each place needs a different removal route

Cyberlockers and file hosts

A cyberlocker stores files that users upload and gives out a download or streaming link. Those links are then shared on forums, in messaging groups and on indexing pages.

The host controls the file, so the removal route is a notice to the host, often through an abuse form or a designated copyright agent. A DMCA notice is the usual format. The link to the file is what must be named, not the page that advertises it.

Files are often re-uploaded under new names after removal, so one notice rarely ends the problem. Repeat checks and a record of earlier removals matter.

Torrent indexes and trackers

A torrent index lists small files that point to content shared between users. The video itself is not stored on the index. It is exchanged between the people who download it.

Because of this, the index is the point you can usually reach. Many indexes publish a contact for copyright complaints, and removing the listing stops new users finding that source. It does not delete copies already held by users.

Where an index is unresponsive, the next step is the service behind it: the domain registrar, the hosting company or the content delivery network in front of it. These parties differ in what they will act on, so expect different answers.

Streaming and aggregator sites

Some sites present a catalogue with a player, but the video comes from another source. The site may embed files stored on a cyberlocker or pull a stream from elsewhere.

There are two targets here. The embedded file at its real host is removed with a notice to that host. The catalogue page that links to it can be reported to the site operator or, if that fails, to its infrastructure providers. Search engines can also be asked to drop the page. See our guide to search delisting.

IPTV and restream services

IPTV and restream services sell or give access to channels and events from sources they do not have rights to. The picture is relayed in real time from a legitimate subscription or a capture, so the stream exists only while the event runs.

For live content, speed decides the outcome. A notice that arrives after the event has no value. Reports go to the host of the stream server, the company providing the network, or the app store or platform that distributes the app. Watermarking the legitimate feed helps here because it can show which account the relay came from. Our guide to protecting live sports streams covers the timing in more detail.

The people running these services often change servers and addresses. Monitoring has to keep up with that, and records of earlier reports are useful when asking a provider to act against a repeat customer.

Social platforms and video sites

Social and video platforms host material that users post, including clips, full uploads and live restreams. They are the most responsive route, because they run reporting forms for copyright and have staff to process them.

Each platform has its own form, its own required details and its own process for disputes. Details such as the exact link, the work concerned and the claimant's information are always required. Some platforms also offer tools for rights owners who register their content in advance. The rules of each platform change, so check the current version before you send.

Messaging groups and closed communities

Large groups on messaging apps share files and links among members. These are harder to reach because the content is not on a public page.

The route is usually the platform's own reporting channel for the group, and removal of the hosted files or the links within it. Public links shared into a group often lead back to a cyberlocker, which can be handled the first way.

Why one approach does not fit all

Three questions decide the route:

1. Who stores the file? That party can delete it.
2. Who only links to it? That party can remove the link, and search engines can drop the page.
3. Who provides the service? Registrars, hosts and network providers can act when the operator will not, but they usually require clear evidence and a specific complaint.

Sending a broad complaint to a party that does not control the material wastes time. A precise request to the one that does is the quickest route.

What to keep for every report

• The exact URL and a dated capture of the page.
• The work concerned, and proof that it belongs to you or that you act for the owner.
• The route used and who it was sent to, with the date.
• The reply and the outcome.

This record shows patterns, such as a host that never responds or a service that keeps returning, and it supports escalation later.