The quick answer
A message saying your broadband was used for pirated films, music, TV or software is usually one of three things: a warning from your own broadband provider about breaking its terms, a letter from a film studio or other rights holder (or a law firm acting for one) asking you to pay, or a scam pretending to be one of those.
On disconnection, the honest answer has two parts. The government-backed "warning letters, then cut-off" scheme written into the law in 2010 is still on the statute book, but the code needed to switch it on is not listed on legislation.gov.uk, so that route is not operating. Your broadband contract is a different matter: provider terms such as Virgin Media's and BT's let them warn, restrict, suspend or end your service if the connection is used to infringe copyright. A rights holder's letter cannot cut you off by itself.
Facts checked October 2026; this is general information, not legal advice.
Who might be contacting you, and what they can do
Each sender has different powers. An ISP (internet service provider) is simply your broadband provider. A rights holder is whoever owns the copyright in the film, song, game or programme.
Who it's from | What it usually is | What they can actually do |
|---|---|---|
Your broadband provider | A warning that the account may have broken its acceptable use policy, or an alert about an infected device | Act under your contract: warnings, restrictions, suspension or ending the service, depending on its terms |
A rights holder or its solicitors | A letter of claim asking you to pay compensation and promise to stop, usually after a court ordered your provider to hand over your name and address | Negotiate, and if they choose, bring a civil court claim; they can't switch off your broadband themselves |
An anti-piracy body such as FACT | A warning to stop using a "loaded" streaming stick or illegal TV service | Warn you to stop; FACT's December 2025 messages told recipients they risked prosecution |
A scammer | A fake version of any of the above, designed to make you pay or click quickly | Nothing, unless you pay or hand over details |
Warnings from your broadband provider
Every provider has an acceptable use policy (AUP): the part of your contract that sets out what you mustn't do with the connection. Infringing copyright is on the banned list in the two big-provider policies we checked in October 2026.
- Virgin Media bans storing, distributing or transmitting material that infringes someone else's intellectual property rights, including copyright. It says the account holder is responsible for use of accounts in their name, even use they didn't know about.
- BT lists infringing copyright or other intellectual property rights as an illegal use you mustn't make of its services. It makes the account holder responsible for use by anyone at the home or anyone they're responsible for, naming family, friends, tenants and visitors, and for any other devices connected to the network.
Both set out a ladder of responses. Virgin Media may investigate, give an informal request or formal warning, suspend or restrict the service until it's satisfied the conduct has stopped (it may, at its discretion, lift a suspension once you give a formal written undertaking) or terminate, though it says it generally tries to work with users first. BT can investigate, issue a formal warning, block, limit or suspend access, or end the agreement with or without notice, and in serious cases report you to the police.
Gigaclear's residential terms (February 2026) say you're responsible for all use of the service whether or not you gave permission, and that you could be liable for unlawful use such as illegally downloading copyright material. Wording differs, so read your own provider's AUP rather than assuming any of this applies word for word. Switching won't change much, since every provider we checked makes the account holder responsible, but read the AUP alongside the contract summary before you sign. Our guide to UK broadband providers links to each provider's page, including Virgin Media broadband deals and BT broadband deals.
A malware alert is not a piracy accusation
Some provider letters are about something else entirely. Virgin Media, for instance, sends a letter or email if it suspects a device in your home is infected with malware and sending malicious traffic, and it also sends "open proxy" alerts. It says an infection is unlikely to be your fault, though it is against its AUP and the service could be suspended or cancelled if the problem continues. It advises scanning devices, changing passwords and factory-resetting an infected router. Our guide to what to do when your provider says a device is infected walks through the clean-up.
The old Get It Right alerts
Talk of providers "sending piracy warning emails" may refer to the Get It Right campaign. ISPreview reported in January 2017 that BT, Virgin Media, TalkTalk and Sky were about to start sending "educational" alert emails to customers whose IP address rights holders had spotted sharing content on peer-to-peer networks (file-sharing systems where users download from, and upload to, each other). The alerts were to contain no threats or demands for money, and the providers would not monitor their customers. ISPreview reported in July 2019 that the alerts had stopped after around 1 million had been sent.
So an email today claiming to be one, or mixing a provider's branding with a payment demand, deserves extra suspicion.
Letters asking you to pay: how they got your name
A rights holder watching file-sharing usually sees only an IP address: the number that identifies an internet connection at a given moment. To turn that into a name and postal address, it has to go to the High Court and ask for a Norwich Pharmacal order, a court order that makes a third party (here, your provider) disclose information about people who may have wronged the applicant.
In the leading case, Golden Eye v Telefonica, decided in March 2012, rights holders asked for the details of up to 9,124 O2 customers. It was undisputed there that providers served with the relevant notice had since 2009 had to keep a year's records of which customer used which IP address.
The Intellectual Property Office's guidance on letters alleging online copyright infringement explains why file-sharing is usually the trigger: peer-to-peer software normally uploads pieces of a file to other people while it downloads, and the IP addresses of everyone sharing that file are visible to the copyright owner's monitoring systems.
If your provider handed over your details, a court made it. In a 2019 Virgin Media case the judge noted customers might blame Virgin for the demands, though it acted under compulsion of a court order. Our guide to what your broadband provider can see explains more about the records providers hold.
What the courts have said about these letters
In the 2012 Golden Eye judgment, the High Court:
- accepted that an IP address may not identify the person who infringed;
- held that a proposed demand for £700 from each recipient was "unsupportable", noting that an unknown share of the people written to would not be infringers at all;
- found that the draft letter's threat to ask the provider to slow down or terminate the recipient's connection was unjustified;
- criticised the draft letter for not making clear that the court's disclosure order did not mean it had considered whether the recipient had actually infringed;
- said a 14-day deadline to respond was unreasonable for consumers when there was no urgency, and that 28 days would be reasonable.
The court controlled the letter's wording. It granted the order at first for only two of the claimants; in December 2012 the Court of Appeal allowed the other claimants' appeal, so the order was made for them too.
In 2019, in Mircom v Virgin Media, the High Court dismissed applications for Virgin Media to disclose subscribers' details in batches of up to 5,000 IP addresses a fortnight, with up to 500 settlement letters a week. The judge found the evidence fundamentally defective, and said the applicants hadn't shown how they had used details from earlier orders, so he couldn't be satisfied they genuinely intended to seek redress rather than run a "money-making scheme". The judgment records an email from 2015 saying that, after an earlier order against Virgin Media, letters went to 749 people, 76 admitted liability, 15 settled without admitting it, and no court proceedings had been issued.
The most recent wave we found was reported by ISPreview in September 2021: after a court order against Virgin Media in July 2021, the law firm Lewis Silkin wrote to account holders for Voltage Holdings over the film Ava, giving 14 days to respond. Virgin Media told ISPreview a very small number of its customers might receive letters, and that the court had not made any findings of copyright infringement against them. We haven't found a reliable source on whether letters are being sent in 2026, so we won't say either way.
Does paying the bill make you responsible for everyone's downloads?
Your contract and copyright law pull in different directions here, so take legal advice. Two things are on record:
- Under your contract, terms such as BT's, Virgin Media's and Gigaclear's make the account holder responsible for how the connection is used, including by other people.
- Under copyright law, the Golden Eye judge criticised the draft letter for suggesting that simply letting someone else use your connection made you liable, saying (following an earlier judge) that nothing less than authorisation is enough for infringement, at least for a damages claim.
So a provider may hold you responsible under its terms even where a rights holder would still have to prove its claim in court.
Can you actually be disconnected?
Of three possible routes, only one is live.
1. Under the Digital Economy Act 2010: not operating
The Digital Economy Act 2010 added a two-stage scheme to the Communications Act 2003 from 8 June 2010. First, rights holders could report infringements to providers, who would notify the subscriber with the IP address and time of the evidence and how to appeal. But under section 124A, a report can be sent only if an "initial obligations code" is in force, and a title search on legislation.gov.uk on 9 October 2026 found no such code listed.
The second stage, "technical obligations", could make providers slow a subscriber's connection, block particular material, suspend the service or limit it another way. That needs an Ofcom assessment, a Secretary of State order made no sooner than 12 months after an initial obligations code first comes into force, and approval by both Houses of Parliament after a 60-day consultation. With no code listed, those preconditions haven't been met. ISPreview reported in 2015 that the Act's warning-letter and disconnection measures had been held up by cost, legal challenges and doubts about IP-address evidence, which led to the voluntary Get It Right alerts instead.
2. Because a rights holder asks: no
A letter from a rights holder or law firm is not a court order against your broadband, and it can't order your provider to cut you off. Whether a provider acts on anything a rights holder tells it is a matter for the provider's own terms (route 3 below). In Golden Eye the rights holders' lawyers accepted that "request" was a better word than "application" for what they meant, and the High Court still found a threat to ask the provider to slow or terminate the connection unjustified in a letter of that kind.
3. Under your contract: yes, it's possible
This is the realistic route: the AUP powers described above. If your provider has written to you, check exactly which clause it relies on and what it's asking you to do.
For other reasons providers can slow or block traffic, such as court-ordered blocks on piracy sites, see our guide on whether your provider can slow down or block websites.
Your IP address isn't the whole story
Golden Eye accepted that the downloader may not be the account holder, giving these examples:
- someone else in the household, whether they live there or are visiting;
- someone outside the home using an insecure Wi-Fi router;
- a computer infected with a trojan (malware that lets someone else control it);
- a public computer.
Records can also be wrong: the same judgment notes providers sometimes identify the wrong customer, for example through time-zone mistakes. The 2019 Mircom judgment noted that the applicants themselves accepted some account holders identified this way may not be the actual infringers. The Intellectual Property Office's guidance makes the same point plainly: a provider can only give out the account holder's details, that may not be enough to hold you responsible, and it is for the copyright owner to prove who committed the infringement.
If you think a neighbour or stranger may have been on your network, our guide to checking whether someone is using your Wi-Fi without permission shows how to look at your router's device list. If you knowingly share your connection with a lodger or neighbour, read sharing broadband with neighbours, lodgers or guests, because the provider terms we've checked make the account holder responsible for other people's use.
What to do if a letter or email arrives
- Don't click, call or pay from the message itself. Citizens Advice's scam checklist includes unexpected contact, missing company details such as a postal address, pressure to pay quickly and unusual payment methods such as vouchers. It says genuine organisations shouldn't pressure you to pay straight away.
- Check who sent it through a route you trust. Citizens Advice advises using contact details from the organisation's official website, not the number on the letter, and not replying to an email or text to check it. For a provider message, log in through its own app or website. The Intellectual Property Office adds that your provider may be able to tell you whether a rights holder's letter is part of a legitimate enforcement process.
- Work out what kind of message it is, using the table near the top of this guide.
- Read the details closely. In Golden Eye, the rights holders' evidence listed each IP address with a date, time and time zone. See what the letter says about yours, then write down where everyone in the household and every device was at that time, and check whether your Wi-Fi was secured then.
- Don't ignore a genuine legal letter, and don't rush. In England and Wales, Citizens Advice explains that before a court claim the parties are expected to try to settle and share relevant documents, and a letter before action must be sent; the court takes it into account if those rules are ignored. The Intellectual Property Office's advice is to respond even if, at first, you only ask for more time to get advice.
- Get advice before you pay or admit anything. Citizens Advice or a solicitor can help you understand your options and decide how to reply.
- Reply in writing and keep copies of everything you send and receive, with dates.
- Secure the connection whatever the outcome (see below).
If you think the message is fake, our guide to broadband scam calls and emails explains how to report it. If you later want to change provider, you can compare broadband deals at your postcode; a partner runs the comparison, and we don't switch you or give legal advice.
Questions to ask before you respond
Use these, alongside the court findings above, to test a letter of claim or to ask your adviser about it:
- Does it name a real firm with a postal address you can verify independently?
- Does it say which court order your details were disclosed under, and when? In Golden Eye, a copy of the order was to go with each letter.
- Does it make clear that the order isn't a finding that you did anything?
- Does it explain how any sum demanded was worked out?
- Does it threaten to cut off your broadband?
- How long does it give you?
For a provider warning, ask in writing which clause it relies on and what it wants you to do.
Streaming sticks, FACT warnings and blocked sites
Not every warning involves file-sharing. In December 2025, ISPreview reported, the anti-piracy body FACT (the Federation Against Copyright Theft) emailed and texted more than 1,000 UK broadband users who had bought "loaded" Firestick, Android or Kodi devices from a convicted supplier, telling them to stop or risk prosecution and citing Section 11 of the Fraud Act 2006. Our guide to the risks of illegal streaming sticks and IPTV covers what to do if you have one.
Blocked piracy sites are separate again: a court-ordered block (under section 97A of the Copyright, Designs and Patents Act 1988) is aimed at the website, not at you. If a site has stopped loading, see why a website is blocked on your broadband.
Stop it happening again
Whether or not the claim was right, a few changes help:
- Lock down the Wi-Fi. Use a strong password and security setting, change the router's admin password and keep it updated. Our guide to securing your home router and Wi-Fi has the steps.
- Give visitors a guest network so they're kept apart from your own devices, but remember the account holder is still responsible under the terms we've checked.
- Talk to the household, including lodgers: letters go to the account holder.
- Remove file-sharing software you don't need from computers, and scan devices if you've had any hint of malware. The Intellectual Property Office warns that with default settings such software will often offer files on your computer to other people, so it can share material without anyone meaning to.
Copyright warning letter FAQs
Can my broadband provider cut me off for illegal downloading?
Under your contract it can. Terms such as Virgin Media's and BT's acceptable use policies ban copyright infringement and allow warnings, restrictions, suspension or ending the service. The separate Digital Economy Act 2010 scheme for slowing or suspending connections isn't operating, because no initial obligations code is listed on legislation.gov.uk (checked October 2026).
Why does a law firm have my name and address from my internet provider?
Usually because a rights holder asked the High Court for a Norwich Pharmacal order requiring your provider to disclose who was using a particular IP address at a particular time. The provider must comply, but the order doesn't mean the court decided you infringed anything.
Do I have to pay a letter demanding money for an alleged download?
A letter isn't a court judgment. Check it's genuine using contact details you find yourself, then get advice from Citizens Advice or a solicitor before paying or admitting anything. Don't ignore a genuine legal letter: in England and Wales the court expects parties to try to settle before any claim is made.
What if someone else used my Wi-Fi to download?
The High Court accepted in Golden Eye v Telefonica (2012) that an IP address may not identify the infringer: it could be someone else in the household, an outsider on insecure Wi-Fi or an infected computer. Note your contract may still make you responsible, so get advice and secure your network.
Is the 'three strikes' warning letter scheme in force in the UK?
The Digital Economy Act 2010 put a warning-letter and technical measures scheme into the Communications Act 2003, but reports can only be sent if an initial obligations code is in force, and none is listed on legislation.gov.uk as of October 2026. Disconnection orders would also need Parliament's approval.
How can I tell if a copyright letter or email is a scam?
Citizens Advice warning signs include unexpected contact, no postal address or real company details, pressure to pay quickly and unusual payment methods such as vouchers. Check by contacting the organisation through its official website, not the details in the message, and don't pay through a link in the message.



