Pirate sites pulled €382M in ad revenue as brand safeguards falter

The €382 million in estimated ad revenue on infringing sites signals that programmatic supply-chain controls — Infringing Watch Lists, brand safety tools, and the EU's voluntary Memorandum of Understanding — are not keeping pace with evasion tactics. For streaming, the problem is dual-edged: piracy siphons viewers and ad dollars from legitimate platforms, while major brand ads placed alongside stolen content lend false legitimacy to illicit services. Watch whether the EU's DSA advertising codes of conduct, expected in 2025, introduce enforceable supply-chain transparency requirements or remain voluntary commitments.

The EUIPO released the 2025 findings alongside a broader discussion paper on online advertising and IP infringement, also published in June 2026, which details how infringers exploit programmatic systems through domain rotation, cloaking, auto-redirection from known piracy hubs to innocuous-looking "clean" domains, and affiliate marketing abuse. These tactics allow pirate sites to evade keyword-based filters and "Do Not Advertise" blocklists maintained by ad verification companies, keeping revenue flowing even when primary domains are flagged.

The revenue increase is striking even accounting for methodology changes. The 2024 EUIPO monitoring exercise, published November 2025, covered 7,250 websites generating €242 million worldwide; the 2025 exercise tracked fewer sites (5,671) but estimated €382 million — a 58% increase on a smaller sample. The 2024 report also noted that major brand advertising on monitored websites had grown 567% since 2021 (from 3% to 20% of impressions), and explicitly linked the deterioration to the 2023 termination of coordinated outreach programs that educated brands about advertising on infringing sites. Per Nsane Forums coverage (June 2026), major brand advertising on court-adjudicated "illegal" sites reached 59% of all ads in Q4 2025, and two brands with "global operations from China" accounted for 96% of major brand ad impressions on PIPCU Infringing Watch List domains — highlighting the geographic limits of EU-centric blocklists.

Industry fraud-detection efforts have surfaced similar patterns. AdExchanger reported in August 2024 that ad fraud detection firm HUMAN uncovered "Camu," a Brazil-based cloaking operation serving 2.5 billion daily bid requests on piracy sites by showing different content to users versus advertisers performing due diligence. HUMAN cut the operation from 2.5 billion to 100 million daily bid requests, but the underlying cloaking techniques remain difficult to detect using standard programmatic metrics.

Regulatory pressure is building. The EU Digital Services Act, fully applicable since February 2024, includes advertising transparency provisions (Articles 16, 26, 34, and 39) and mandates voluntary codes of conduct for online advertising. Per an Interface EU analysis, these codes were expected by mid-2025 and could extend know-your-business-customer requirements to ad-tech intermediaries — though their voluntary nature and narrow scope have drawn criticism from civil society groups. A Stanford Law School working paper (May 2026) also examined whether Very Large Online Platforms can escape Article 39's ad transparency reporting obligations, suggesting enforcement remains unsettled.