FTC and HSI warn that watching games on pirate sites exposes users to malware

Before the most-watched games, such as major soccer rivalries, searches for “free” streams on unofficial sites and apps increase. U.S. authorities warn that those pages can infect devices with malware and expose payment data.

What the Federal Trade Commission says

The Federal Trade Commission (FTC) explains in a consumer alert that some apps and add-ons offer pirated content and that hackers use them to spread malware. According to the FTC, anyone who downloads one of those apps is likely to also download malicious software.

The agency notes that malware can spread to other devices on the same wireless network, including the computer used for banking or shopping. Among the possible harms it mentions are theft of card data, shopping credentials and bank access, as well as using the equipment to commit crimes. Its advice is not to watch pirated content, either online or through a streaming device.

The alert is from May 2019, but the general warning remains published on the agency’s website.

Background: more than 1,000 domains seized

On July 20, 2026, the Department of Justice reported that the United States seized more than 1,000 internet domains used to stream 2026 World Cup matches without authorization. The seizures took place in three actions during the tournament; nearly 400 domains had been seized by late June.

The deputy assistant attorney general of the Criminal Division, A. Tysen Duva, said the operation aims to reduce “the risk to American consumers from the malicious software embedded in many illicit streaming services,” that is, the risk to consumers from malicious software included in many illicit streaming services.

Matthew Millhollin, associate executive assistant director of Homeland Security Investigations (HSI), said that watching content on illicit sites “opens your devices to unknown risks” and that criminals could “inject malware or steal your payment information.”

Signs that a device has been infected

The FTC, in its guide on malware, lists signs of infection:

• The computer becomes slow, freezes or shuts down on its own.
• Your browser’s homepage changes or redirects you to sites you did not want to visit.
• New toolbars or programs appear.
• You see many pop-up ads, even on unexpected sites such as government pages.
• Posts or messages you did not write are published on your social networks.

What can you do?

If you suspect your device has malware, the FTC recommends these steps:

1. Stop logging into banking or shopping accounts.
2. Update your security software, or download one if you don’t have it, and run a scan.
3. Change your passwords and turn on two-step verification.
4. Report suspicious ads, sites or emails at ReportFraud.ftc.gov. If someone stole your information, report it at IdentityTheft.gov.

What does it mean to you?

• A “free” game on an unauthorized site can cost you card data or access to your accounts, according to the FTC and HSI.
• Downloading an app or add-on to watch games is a risk the FTC describes explicitly.
• If a site asks you to “verify” your card to watch the game, leave the page.
• Before looking for alternatives, first check the page of whoever holds the broadcast rights.