Copyright trolling is a litigation strategy in which companies acquire rights to films, photographs, or adult videos and then use forensic software, mass lawsuits, and demand letters to extract settlement payments from people accused of downloading those works through file-sharing networks. The business depends on a simple imbalance: fighting a federal copyright case costs far more than the few thousand dollars the troll is asking for, so most targets pay even when they have real defenses. If you’ve received one of these letters, understanding how the operation works is the first step toward responding sensibly.
The Statutory Damages Engine
The whole model rests on a single provision of the Copyright Act. Under 17 U.S.C. § 504(c), a copyright holder can skip proving actual financial harm and elect “statutory damages” instead. For one work, a court can award between $750 and $30,000, and if the infringement is found willful, the ceiling climbs to $150,000.1Office of the Law Revision Counsel. 17 USC 504 – Remedies for Infringement: Damages and Profits Nobody has to show the copyright holder lost any money. The theoretical exposure alone is what gives the demand letter its force.
The entities running these operations rarely create original content. They buy rights to older films, low-budget photographs, or adult videos, sometimes acquiring entire catalogs from producers who have already extracted whatever commercial value the works had. Adult content is a favorite target because recipients face social embarrassment on top of legal risk, which makes them pay faster and more quietly. Before filing anything, the plaintiff must register the work with the U.S. Copyright Office; federal law bars an infringement lawsuit on a U.S. work unless the copyright has been registered or registration has been refused.2Office of the Law Revision Counsel. 17 USC 411 – Registration and Civil Infringement Actions Most trolling operations handle registration well in advance.
Profitability depends on volume. A federal filing fee runs roughly $405, so these plaintiffs maximize efficiency by naming dozens or hundreds of “John Doe” defendants in a single complaint. The goal is never trial. If even a fraction of the targets pay $3,000 to settle, one case covering 200 IP addresses generates hundreds of thousands of dollars. Entities like Strike 3 Holdings and Malibu Media filed so many of these cases that they accounted for a significant share of all U.S. copyright filings during their peak years, with one judge describing their work as “cookie-cutter infringement actions not to be made whole, but rather as a primary or supplemental revenue stream.”
How Your Name Ends Up on a Letter
The process starts with forensic monitoring software deployed on public file-sharing networks, almost always BitTorrent. Investigators either join existing “swarms” of users sharing a particular file or run modified clients that act as honeypots, logging every connection. When a user downloads or uploads a copyrighted file through these networks, their IP address is visible to every other participant in the swarm. The forensic software captures that IP address, a timestamp, and the file’s unique hash. Companies like Guardaley and IPP International specialize in generating this evidence and handing it to copyright holders as a spreadsheet ready for court.
What the data identifies is a connection point, not a person. The IP address might belong to a household with five family members, a coffee shop with open Wi-Fi, or a business with dozens of employees. That gap is where much of the legal controversy lives.
Armed with the list, the copyright holder files a federal lawsuit against unnamed John Doe defendants, typically using Federal Rule of Civil Procedure 20 to join many defendants in one complaint by arguing they all participated in the same swarm.3United States District Court Northern District of Illinois. Federal Rules of Civil Procedure – Rule 20 Permissive Joinder of Parties The plaintiff then moves for expedited discovery and asks the court to authorize a Rule 45 subpoena to Internet Service Providers like Comcast, AT&T, or Verizon.4Legal Information Institute. Federal Rules of Civil Procedure Rule 45 – Subpoena The ISP has records tying a specific IP address at a specific moment to an account holder’s name and address.
Most major ISPs notify subscribers when a subpoena targets their information, usually giving a few weeks before complying. For cable providers, 47 U.S.C. § 551 requires notice when a subscriber’s personally identifiable information is disclosed pursuant to a court order.5Office of the Law Revision Counsel. 47 USC 551 – Protection of Subscriber Privacy For non-cable ISPs, the notification is a matter of company policy. That window is the subscriber’s first and often only chance to try to quash the subpoena before their identity is handed over.
Why Motions to Quash Often Fail
Filing a motion to quash sounds like the obvious response, but courts frequently deny them in BitTorrent cases. The subpoena targets the ISP, not the subscriber, and the subscriber is not yet a named party to the lawsuit. Many courts have found that a non-party subscriber lacks standing to challenge a subpoena issued to someone else. Even when a court entertains the motion, it often concludes the plaintiff’s need for identifying information outweighs the subscriber’s privacy interest at this stage.
When Courts Sever the Defendants
The mass-joinder strategy has a real vulnerability. Several judges have ruled that lumping dozens of anonymous file-sharers into one case is improper because each defendant has different facts and different defenses. One might argue a hacked router, another might challenge jurisdiction, a third might not even live in the district. One judge noted that the pressure on these defendants “to settle their case quickly and thereby avoid embarrassment and litigation costs, when they may not even have committed any infringement, is all too real.” When a court severs the defendants, the plaintiff must either refile individual lawsuits and pay a filing fee for each one or drop the case. That math often ends the case.
The Settlement Demand Letter
Once the ISP turns over names, the plaintiff’s attorneys send formal demand letters. These are designed as pressure instruments. A typical letter cites the $150,000 maximum in statutory damages, names the specific work allegedly downloaded, and offers to resolve everything for a settlement fee of roughly $2,000 to $5,000. When the work is an adult film, the letter doesn’t need to spell out the embarrassment angle. The recipient already understands that refusing to pay could mean their name appearing in a public federal court record next to the title of a pornographic movie.
Letters almost always include a short deadline and language suggesting the offer will increase or vanish if payment isn’t prompt. The urgency is calculated to discourage recipients from consulting an attorney. The economics reinforce it: taking a federal copyright case through early motions can easily run $10,000, and full defense through trial costs many times that. When the demand is a fraction of the defense cost, paying can feel rational even to people who believe they did nothing wrong.
Why an IP Address Is Not a Person
The most important weakness in the troll’s case is the assumption that an IP address identifies a specific infringer. Courts have increasingly rejected that logic. In Cobbler Nevada v. Gonzales, the Ninth Circuit held that alleging someone was the registered subscriber of an IP address tied to infringing activity is not enough to state a claim for direct or contributory infringement. The court observed that “multiple devices and individuals may be able to connect via an IP address,” so “simply identifying the IP subscriber solves only part of the puzzle.” Holding account holders liable for anyone who used their connection would, the court warned, “put at risk any purchaser of internet service who shares access with a family member or roommate.”
That reasoning has spread. In multiple Strike 3 Holdings cases, judges have denied requests to subpoena ISPs after finding that geolocation data tied to an IP address could not reliably establish either the identity of the infringer or whether the defendant was in the court’s jurisdiction. One court noted that in more than a third of Strike 3’s resolved cases, the company “could not demonstrate that the named defendant was the alleged infringer.”
Holding an account holder responsible for someone else’s downloading requires proving vicarious or contributory infringement, which is a heavier lift. Vicarious liability requires showing the account holder directly benefited financially from the infringement and had the right and ability to control it.6Ninth Circuit Court of Appeals. Secondary Liability – Vicarious Infringement – Elements and Burden of Proof A parent whose teenager used the home Wi-Fi doesn’t meet that standard. Neither does someone whose neighbor connected to an unsecured router.
What to Check Before You Pay Anything
Ignoring one of these letters is risky because the underlying copyright claim may be real even when the tactics are predatory. A few things are worth verifying.
Is the Copyright Actually Registered?
No registration, no lawsuit. If the demand letter doesn’t cite a registration number, ask for one.2Office of the Law Revision Counsel. 17 USC 411 – Registration and Civil Infringement Actions Some operations send letters for works that have never been registered, which means the threat of litigation is empty.
How Old Is the Alleged Activity?
A civil copyright infringement claim must be filed within three years of when it accrued.7Office of the Law Revision Counsel. 17 USC 507 – Limitations on Actions If the downloading supposedly happened more than three years before any lawsuit was filed, the claim is time-barred. Trolling operations working through old data sometimes send letters that fall outside this window.
Does Innocent Infringement Apply?
If you genuinely had no reason to believe your actions constituted infringement, a court can reduce the statutory damage floor from $750 to as low as $200 per work.8Office of the Law Revision Counsel. 17 USC 504 – Remedies for Infringement: Damages and Profits At $200 of exposure, a $3,000 settlement demand looks a lot less like a bargain.
Could the Plaintiff End Up Paying Your Attorney?
Under 17 U.S.C. § 505, a court can award reasonable attorney’s fees to the prevailing party in a copyright case.9Office of the Law Revision Counsel. 17 USC 505 – Remedies for Infringement: Costs and Attorneys Fees The Supreme Court has said courts should give substantial weight to the objective reasonableness of the losing party’s position in making that call. A copyright troll that files a weak case and loses faces the risk of paying the defendant’s legal bills. That risk is real but discretionary, applied case by case.
How Far the Pushback Goes
Federal courts have not been passive. When trolling operations have crossed from aggressive to fraudulent, judges have imposed sanctions. The most notorious example was Prenda Law, where courts found the firm had created shell companies, uploaded its own content to file-sharing networks to generate targets, and lied to judges about its ownership. Federal judges issued sanctions and referred the attorneys for criminal investigation. Beyond outright fraud, courts have used Federal Rule of Civil Procedure 11 to sanction attorneys who filed infringement claims without an adequate factual basis, with penalties ranging from a few hundred dollars to over $500,000.
Those sanctions make headlines, but they remain the exception. Most copyright trolling operates inside the technical bounds of the law. The demand letters are unpleasant but legal. The underlying copyrights are usually valid. The statutory damage framework Congress built is doing what it was designed to do, in a context nobody imagined when the Copyright Act was drafted. Until that framework changes, the economics will keep favoring the people sending the letters.