Ahead of the 2026 FIFA World Cup, an international law enforcement operation dealt a major blow to illegal streaming networks that had been generating millions of dollars for years through unauthorized broadcasts of sports events, TV channels, and premium content.
Operation KRATOS 2 lasted seven months, from September 2025 to April 2026, and was coordinated by Bulgaria with support from Europol. The operation resulted in 29 arrests, the dismantling of nine organized criminal groups, and the removal of more than 27,000 URLs used for illegal streaming activities.
Investigators focused not only on individual websites and services but also on the broader infrastructure that enabled illegal IPTV platforms to operate across multiple countries and jurisdictions. This approach helped authorities gather intelligence on the criminal networks behind these services, map their structure, and identify individuals responsible for their technical operation and management.
According to Europol, the operators of these services are increasingly relying on complex international infrastructure to conceal their activities.
“Groups behind illegal streaming services increasingly rely on sophisticated technical infrastructures, separating customer-facing websites from servers hosting illegal content and distributing these services across multiple countries to avoid detection,” Europol said.
Authorities paid particular attention to these platforms ahead of the 2026 FIFA World Cup. Major sporting events traditionally drive a surge in demand for illegal streams, creating significant profits for operators of pirate broadcasting services.
However, the issue extends beyond copyright infringement. Europol warned that users of illegal streaming platforms often expose themselves to additional cybersecurity risks, including malware infections, spyware, personal data theft, and other forms of online fraud.
Against this backdrop, the FBI recently warned about a growing number of fake websites related to FIFA and the 2026 FIFA World Cup. According to U.S. authorities, these websites are designed by cybercriminals to steal visitors’ personal and financial information.
Operational coordination of KRATOS 2 was carried out by Europol and Bulgaria’s General Directorate for Combating Organized Crime. Law enforcement agencies from Belgium, Bulgaria, Croatia, France, Greece, Ireland, Italy, the Netherlands, Poland, Romania, Spain, the United Kingdom, and the United States participated in the operation.
Europol said that intelligence gathered during the investigation will support ongoing efforts to combat international digital piracy networks and the criminal activities associated with them.
