In 2007, a Minnesota mother of four named Jammie Thomas-Rasset sat across from a federal jury that had been asked to decide what she owed for sharing twenty-four songs on the file-sharing network Kazaa. Twenty-four songs. At ninety-nine cents apiece on iTunes, that is about twenty-four dollars of music. The jury came back with a verdict of $222,000. A second jury, after a retrial, said $1.92 million. A third jury said $1.5 million. By the time the dust settled at the Eighth Circuit in Capitol Records, Inc. v. Thomas-Rasset, 692 F.3d 899 (8th Cir. 2012), the judgment stood at $222,000—roughly $9,250 per song, for music that retailed for less than a dollar.

That gap—between what the work costs and what infringing it can cost you—is the single most important thing to understand about intellectual property piracy. The penalties are not pegged to the market price of the thing you copied. They are pegged to a statutory scheme designed to deter, and Congress set the dial high. A handful of pirated movies is not a parking ticket. It is a potential six-figure civil judgment, and in the wrong circumstances, a federal felony.

This article is a complete, plain-English map of what can actually happen to someone who pirates intellectual property—and "pirates" here is a broad word. It covers the kid ripping movies in a dorm, the small business stocking its computers with one paid copy of expensive software running on forty machines, the entrepreneur selling fake handbags out of a warehouse, the engineer who walks out the door with a thumb drive full of his former employer's source code, and the platform operator who builds a business that runs on other people's infringement. We will walk through four bodies of law—copyright, trademark counterfeiting, patent, and trade secret—and the civil and criminal consequences each one carries. We will name the statutes (because the numbers matter), name the cases (because they are how abstract rules become real money), and use worked hypotheticals with clearly invented parties so you can see how the rules land in ordinary life.

A note on tone before we begin. This is a cautionary subject, and we will be honest about the stakes. But the goal is not to frighten—it is to demystify. Most people who infringe intellectual property have no idea where the lines are, and a surprising amount of everyday behavior is technically infringing while almost never prosecuted, even as a small slice of it draws enormous penalties. Understanding which behavior sits in the dangerous zone is genuinely useful, whether you are trying to stay on the right side of the line or trying to enforce your own rights against someone who has crossed it.

First, a Quick Map: The Four Kinds of "Piracy"

"Piracy" is colloquial shorthand. In the law, the consequences depend entirely on which kind of intellectual property you infringed, because each has its own statute, its own remedies, and its own criminal regime. Here is the lay of the land in one breath.

Copyright protects original works of authorship—songs, films, books, photographs, software, video games. Infringement means exercising one of the owner's exclusive rights without authorization: reproducing the work, preparing derivatives, distributing it, or performing or displaying it publicly (17 U.S.C. §§ 106, 501(a)). This is what most people picture when they hear "piracy." The remedies live in the Copyright Act, principally 17 U.S.C. § 504 (civil damages) and 17 U.S.C. § 506 (criminal infringement). For the bigger picture on how copyright works, see our copyright FAQs.

Trademarks protect brand identifiers—names, logos, the swoosh, the bitten apple. The piracy version of trademark infringement is counterfeiting: making or selling fake goods that bear someone else's mark. Civil counterfeiting lives in the Lanham Act; the criminal regime is 18 U.S.C. § 2320, the trafficking-in-counterfeit-goods statute, originally enacted as the Trademark Counterfeiting Act of 1984. For the brand-owner's perspective on policing fakes, see brand protection online.

Patents protect inventions. Patent "piracy" is just infringement—making, using, selling, or importing a patented invention without a license. It is exclusively a civil matter; there is no such thing as criminal patent infringement. We cover the mechanics in what constitutes patent infringement.

Trade secrets protect confidential business information that derives value from being secret—formulas, source code, customer lists, manufacturing processes. Stealing one is misappropriation, and unlike the others, it carries a robust federal criminal regime under the Economic Espionage Act, plus a federal civil claim under the Defend Trade Secrets Act. See protection of trade secrets.

These four categories overlap in practice—a counterfeit video game console might infringe copyrights in firmware, trademarks in the logo, and patents in the hardware all at once—but the consequences are cleanest when we take them one at a time. We will spend the most time on copyright, because that is where the word "piracy" lives most naturally and where the penalty structure is most often misunderstood. One structural point worth filing away at the start: copyright claims belong in federal court and nowhere else. The Copyright Act grants the federal courts exclusive jurisdiction over infringement claims (28 U.S.C. § 1338(a)) and preempts equivalent state-law claims (17 U.S.C. § 301). So when we say a copyright owner "needs a lawyer and a subpoena," we mean a federal lawsuit—with all the cost and formality that implies for both sides.

Copyright Piracy: The Civil Consequences

The Two Tracks: Actual Damages vs. Statutory Damages

When a copyright owner sues for infringement, the Copyright Act gives them a choice of two remedies, and they get to elect whichever is better for them—a choice they make any time before final judgment. This election right is the hinge on which the whole penalty scheme turns. It lives in 17 U.S.C. § 504.

The first track is actual damages plus the infringer's profits under § 504(b). The owner recovers the loss it actually suffered (lost sales, lost licensing fees) plus any profits the infringer made that are attributable to the infringement and not already counted. The statute splits the burden in a way that favors the owner: the plaintiff need only prove the infringer's gross revenue, and the infringer then bears the burden of proving deductible expenses and the portion of profit attributable to factors other than the infringement (§ 504(b)). That sounds frightening, but for individual file-sharers it is often surprisingly small—what, exactly, did the record label lose because one anonymous person shared a song that thousands of others were also sharing? Proving actual harm is hard, and proving an individual downloader's "profits" is usually impossible because there were none.

That is precisely why the second track exists. Statutory damages under § 504(c) let the owner skip proof of harm entirely and instead recover a sum the court sets within a statutory range, per work infringed. For ordinary infringement, the range is $750 to $30,000 per work, "as the court considers just." If the owner proves the infringement was willful, the ceiling jumps to $150,000 per work. And there is a floor on the other end: if the infringer proves it was an innocent infringer—genuinely unaware and with no reason to know it was infringing—the court may reduce the award to as low as $200 per work (§ 504(c)(2)). That innocent-infringer defense is narrower than it sounds, because a proper copyright notice on the published copy generally forecloses it (17 U.S.C. § 401(d)): once the little © has put the world on notice, a defendant can rarely claim it had no reason to know.

Read those numbers again, because they are the engine of the entire file-sharing litigation era. The award is per work, not per copy and not per dollar of harm. Share thirty songs, and you are exposed to thirty separate awards. Even at the low end, that is $22,500; at the willful ceiling, it is $4.5 million. This is exactly how a Boston University graduate student named Joel Tenenbaum ended up with a $675,000 judgment against him for sharing thirty songs—$22,500 per song—in Sony BMG Music Entertainment v. Tenenbaum, 660 F.3d 487 (1st Cir. 2011), a saga that bounced between the district court and the First Circuit for years before the figure stuck.

Why "Per Work" Is the Whole Ballgame

Let us make this concrete with an invented but realistic example. Suppose Dunder Software LLC discovers that Acme Corp. has been running its $2,000 design program on forty office computers while paying for only two licenses. Acme's defense—"we only saved $76,000, so that's all we owe"—misunderstands the statute completely.

If Dunder elects actual damages, $76,000 in lost license fees might indeed be the number. But if Dunder elects statutory damages, the math changes character, because each separately registered program Acme over-deployed is a "work" generating its own award. And if Dunder can show willfulness—say, an internal email where Acme's IT manager wrote "don't worry, they'll never audit us"—the exposure balloons toward the willful ceiling. Willfulness, in copyright, generally means the infringer knew its conduct infringed or acted in reckless disregard of that possibility. An email like that is roughly the worst document a defendant can produce, because it converts a $76,000 problem into a multiple-six-figure one.

There is a subtlety worth flagging, because it cuts both ways and litigants fight over it constantly. Statutory damages are awarded per work, not per infringer and not per act of infringement—and under § 504(c)(1), "all the parts of a compilation or derivative work constitute one work." So a defendant who copied an entire 100-song album that the label registered as a single compilation may argue for one award, not a hundred. Whether a bundle counts as one work or many is often the most valuable issue in the case, and it explains why plaintiffs register strategically and why defense counsel reach for the compilation argument early.

The lesson Acme learned the hard way is the lesson every business should internalize: software is licensed, not bought, and the gap between "we'll true up if they notice" and "we license what we use" is the gap between an invoice and a lawsuit. For the contract mechanics that govern this, see software licensing agreements. The deeper point about how code is protected—and why over-deployment is copyright infringement rather than mere breach of contract—is laid out in legal protection of software.

Software Piracy and the Audit Letter Nobody Wants

The Dunder hypothetical is not academic. Corporate software piracy—usually unglamorous over-deployment rather than swashbuckling—has its own enforcement ecosystem, and it is worth understanding because it is the form of piracy a typical business is most likely to brush up against.

Industry coalitions such as the BSA (formerly the Business Software Alliance) and the Software & Information Industry Association run organized enforcement programs funded by their member publishers. They solicit tips, frequently from disgruntled former IT employees, and then send a company a letter demanding a "self-audit" of its installed software against its purchased licenses. The leverage is the statutory-damages cannon described above: faced with the possibility of $30,000-per-title (or $150,000 if willful) exposure across dozens of programs, most companies negotiate a settlement that runs to several multiples of the back-license cost, plus a commitment to true up going forward. The defendant rarely gets to court, because the asymmetry between settlement and risk is too stark.

Two practical traps deserve naming. First, the danger is concentrated in the gap between seats purchased and seats deployed—the company that bought twenty licenses and grew to fifty without revisiting the count is the typical target, not the company that pirated anything in the swashbuckling sense. Second, the same over-deployment that creates copyright exposure usually also breaches the license agreement, handing the publisher a contract claim on top of the statutory one. Good software asset management—knowing what you have deployed and reconciling it against entitlements—is the cheapest insurance available against this entire category of risk.

The Registration Catch: You Need It Before You Can Sue—and to Get the Big Money

Here is a wrinkle that trips up even the infringed party. Statutory damages and attorneys' fees are not automatically available. Under 17 U.S.C. § 412, a copyright owner can recover statutory damages and fees only if the work was registered with the U.S. Copyright Office before the infringement began (or, for published works, within three months of first publication). Miss that window, and the owner is limited to actual damages and profits for that work—which, as we saw, can be modest.

And under 17 U.S.C. § 411(a), a U.S. copyright owner generally cannot even file an infringement suit until the work is registered. The Supreme Court made this concrete in Fourth Estate Public Benefit Corp. v. Wall-Street.com, LLC, 586 U.S. 296 (2019), holding that "registration" means the Copyright Office has actually acted on the application—not merely that the owner mailed it in. The practical bite of Fourth Estate is timing: the Office's ordinary processing can take many months, so a rights-holder who waits until it has been infringed to register may sit on the sidelines while the infringement continues, unless it pays for expedited "special handling." So the consequences of piracy depend heavily on whether the victim did its registration homework first. This is why we tell creators to register early and often; see how to register a copyright with the U.S. Copyright Office and our comprehensive guide to copyright registration.

For an infringer, the practical upshot is double-edged: against an unregistered work, your downside is capped at real-world harm; against a properly registered work, the statutory-damages cannon is loaded.

Injunctions, Attorneys' Fees, and Destruction

Money is not the only consequence. A court can issue an injunction ordering the infringer to stop (17 U.S.C. § 502), and can order the impounding and destruction of infringing copies and the equipment used to make them (17 U.S.C. § 503). And under 17 U.S.C. § 505, a court may award costs and reasonable attorneys' fees to the prevailing party. In a contested copyright case, the fees can dwarf the underlying damages—it is entirely possible to "win" a small statutory-damages award and still hand the other side a fee bill that exceeds it. Fee-shifting is a deterrent in its own right, and the Supreme Court has instructed courts to weigh it case by case—giving substantial weight to the objective reasonableness of the losing party's position, while keeping the broader purposes of the Act in view—rather than presume an award either way (Kirtsaeng v. John Wiley & Sons, Inc., 579 U.S. 197 (2016)).

The Small-Claims Alternative: The Copyright Claims Board

One development has quietly changed the calculus for smaller disputes. The CASE Act of 2020 created the Copyright Claims Board (CCB), an administrative tribunal inside the Copyright Office that began hearing cases in 2022. It offers a streamlined, low-cost forum for claims capped at $30,000 in total damages (and $15,000 per work), with no need for the in-person litigation machinery of federal court.

For an infringer, the CCB is genuinely double-edged. The good news: the damages ceiling is far below the federal statutory maximum, and the process is informal. The crucial catch: participation is voluntary—a respondent who is served with a CCB claim has 60 days to opt out, after which the matter is returned to (or simply never leaves the path toward) ordinary federal court, where the full statutory-damages exposure applies. Ignoring a CCB notice, by contrast, can lead to a default determination that is enforceable. The upshot is that small-scale infringers now face a cheaper enforcement channel that rights-holders increasingly use for exactly the disputes—stray photo uses, small-scale copying—that were never worth a full federal suit.

Copyright Piracy: The Criminal Consequences

Most copyright disputes are civil—private parties suing private parties. But Congress has made willful, commercial-scale, or high-volume infringement a federal crime, and the criminal exposure is where piracy stops being expensive and starts being dangerous.

The Core Crime: 17 U.S.C. § 506 and 18 U.S.C. § 2319

The substantive crime is defined in 17 U.S.C. § 506(a). Criminal copyright infringement requires that the infringement be willful—not accidental—and then one of three triggers:

  1. It was done for commercial advantage or private financial gain; or
  2. It involved reproducing or distributing, within 180 days, copies with a total retail value over $1,000; or
  3. It involved distributing a work being prepared for commercial distribution by making it available on a public network, knowing it was intended for commercial distribution (the pre-release leak provision).

The penalties live in the general criminal statute, 18 U.S.C. § 2319. Depending on the scale and whether it was a first offense, a convicted defendant faces fines and imprisonment of up to five years for a first felony offense, and up to ten years for repeat offenders. The statute of limitations for criminal copyright infringement is five years (17 U.S.C. § 507(a)). And the criminal court's powers do not stop at prison and fines: a convicted defendant faces mandatory forfeiture of infringing copies and the equipment used to make them, and may owe restitution to the victim (18 U.S.C. § 2323).

Notice what trigger number two means. You do not have to sell anything to commit the crime. If you reproduce or distribute copyrighted works with a total retail value over $1,000 within a six-month window—even giving them away—you can be prosecuted. That is the legacy of the No Electronic Theft Act (NET Act) of 1997, which closed a loophole exposed in United States v. LaMacchia, 871 F. Supp. 535 (D. Mass. 1994), when an MIT student who ran a piracy bulletin board could not be convicted because the then-existing law keyed criminal liability to commercial profit and he made none. The NET Act made clear that "financial gain" includes the receipt of anything of value, including other copyrighted works—the currency of file-sharing communities—and added the retail-value trigger so that non-commercial but large-scale piracy became prosecutable.

The Streaming Felony: The 2020 Reform

For years there was an odd gap in the law. Unlawful reproduction and distribution (downloading, uploading, selling discs) could be felonies, but unlawful public performance—which is what illegal streaming actually is—was at most a misdemeanor. That made large-scale piracy-streaming services a relatively low-risk operation under the criminal code.

Congress closed that gap with the Protecting Lawful Streaming Act of 2020, enacted as part of the year-end omnibus legislation and codified at 18 U.S.C. § 2319C. It created a felony offense for operating a commercial, for-profit digital streaming service that is primarily designed to stream copyrighted works without authorization. Critically, lawmakers aimed it at the operators of pirate streaming businesses—not at individual users who watch an unauthorized stream, and not at ordinary people who upload a clip. The felony exposure runs up to several years' imprisonment for the worst offenders. The takeaway: building a business on streaming other people's content is now a felony-grade risk, while the casual viewer remains, as a practical matter, outside the criminal crosshairs.

Who Actually Gets Prosecuted

Here is the honest, practical reality, and it matters for calibrating risk. Federal criminal copyright prosecutions are aimed overwhelmingly at commercial-scale operations: people running bootleg DVD factories, pre-release leak rings, counterfeit-software distribution networks, and pirate streaming services. The Department of Justice does not prosecute teenagers for downloading an album. The criminal regime exists, it is real, and the prison terms are real—but the prosecutorial focus is on scale and commerce.

That does not make casual piracy safe, because the civil regime—statutory damages, fee-shifting, the whole Thomas-Rasset apparatus—operates entirely independently of whether anyone is ever criminally charged. A copyright owner does not need a prosecutor; it needs a lawyer and a subpoena. Which brings us to how infringers get found.

How Pirates Get Caught: From IP Addresses to DMCA Notices

A recurring myth is that online piracy is anonymous. It is not, and the mechanics of getting caught are worth understanding because they shape the real-world consequences.

When you download or share a file over a peer-to-peer network, your device broadcasts its IP address to every other participant, including any monitoring firm the rights-holder has hired to sit in the swarm and log who is sharing what. The rights-holder cannot tie that IP address to a name on its own—but it can file suit (sometimes against a "John Doe") and then subpoena your internet service provider to unmask the subscriber behind the address. This is the standard opening move in the file-sharing cases, and it is how anonymous downloaders become named defendants who receive demand letters proposing a few-thousand-dollar settlement to make the case go away. Many people pay rather than gamble on a Tenenbaum-style verdict.

A separate and far more common mechanism is the DMCA takedown notice. The Digital Millennium Copyright Act (17 U.S.C. § 512) gives online platforms a "safe harbor" from liability for user-posted infringement if they remove infringing material when a copyright owner sends a proper notice. For the person who posted the infringing content, the immediate consequence is removal, often followed by a "strike" against the account and, after repeated strikes, termination. The strike system is not optional decoration: to keep its safe harbor, a platform must adopt and reasonably implement a policy to terminate repeat infringers, and the failure to do so is what cost an ISP its safe harbor and exposed it to a $25 million contributory-infringement verdict in BMG Rights Management (US) LLC v. Cox Communications, Inc., 881 F.3d 293 (4th Cir. 2018). We have a full walkthrough in how to file a DMCA takedown notice and respond to one. The DMCA also has a separate anti-circumvention provision (§ 1201) that makes it unlawful to break the digital locks protecting a work—a regime that has its own carve-outs and triennial exemptions, which we explore in the context of unlocking cell phones and the DMCA exemption.

The point of cataloguing these mechanisms is simple: the gap between "I'll never get caught" and reality is much narrower than infringers assume. IP addresses are logged, ISPs respond to subpoenas, and platforms forward notices. Piracy leaves a trail.

Secondary Liability: You Can Be on the Hook for Someone Else's Piracy

Some of the largest piracy judgments in history were not against the people who actually copied anything. They were against the companies that built the tools and the businesses that made the copying happen. This is secondary liability, and it is one of the most important—and least understood—consequences in the field. There are three flavors, and all three rest on a common floor: there must be an underlying act of direct infringement before anyone can be held secondarily liable for it.

Contributory Infringement

A party is liable for contributory infringement if it knows of (or is willfully blind to) the infringing activity and materially contributes to it (Erickson Products, Inc. v. Kast, 921 F.3d 822 (9th Cir. 2019)). The classic counterweight is the Supreme Court's decision in Sony Corp. of America v. Universal City Studios, Inc., 464 U.S. 417 (1984)—the "Betamax" case—which held that selling a product capable of "substantial noninfringing uses" (like a VCR, which people used to time-shift TV shows) does not, by itself, create liability. Sony is why the maker of a photocopier is not liable every time someone copies a book. The knowledge standard matters a great deal: while many courts speak of "knowledge or reason to know," the Fourth Circuit in BMG v. Cox held that contributory liability requires actual knowledge or willful blindness, not merely that the defendant "should have known"—a meaningful narrowing for service providers who cannot police every byte that crosses their networks.

Vicarious Liability

A party is vicariously liable if it has the right and ability to control the infringing activity and a direct financial interest in it (Metro-Goldwyn-Mayer Studios Inc. v. Grokster, Ltd., 545 U.S. 913, 930 (2005); A&M Records, Inc. v. Napster, Inc., 239 F.3d 1004 (9th Cir. 2001)). This theory does not even require knowledge. Its roots are in the old "dance hall" cases, where a venue that profited from performances was liable for the bands' unlicensed song choices even if the owner never knew which songs would be played. The modern analog is a platform that profits from infringing traffic and could police it but chooses not to.

Inducement: The Grokster Rule

The headline doctrine—and the one that ended the first generation of file-sharing companies—is inducement, announced in Grokster, 545 U.S. 913. The defendants distributed peer-to-peer software and argued they were protected by Sony because their software had noninfringing uses. The Supreme Court unanimously disagreed, holding that "one who distributes a device with the object of promoting its use to infringe copyright, as shown by clear expression or other affirmative steps taken to foster infringement, is liable for the resulting acts of infringement by third parties." 545 U.S. at 919.

What sank Grokster was intent. The company had marketed itself to former Napster users, made no effort to filter infringement, and depended on infringing volume for its advertising revenue. The Sony safe harbor protects neutral technology; it does not protect a business built and promoted as an infringement machine. Courts have since applied Grokster to shut down a series of pirate operations—see, e.g., Columbia Pictures Industries, Inc. v. Fung, 710 F.3d 1020 (9th Cir. 2013) (the isoHunt BitTorrent indexer), where the Ninth Circuit treated inducement as an independent basis for liability and rejected the operator's attempt to hide behind the DMCA safe harbor.

The lesson for any entrepreneur building a platform, a tool, or a service that could be used to infringe: the consequences of piracy can reach you even if you never copy a single file yourself. What matters is whether you built and promoted the thing with the object of fostering infringement. This is closely related to the platform-immunity debates we cover in Section 230 reform and platform liability for user-generated IP infringement—and it is worth knowing that Section 230 does not shield platforms from intellectual property claims, which is exactly why the DMCA safe harbor exists as a separate scheme.

Trademark Counterfeiting: When "Knock-Off" Becomes a Felony

Shift from copyright to trademarks, and "piracy" takes the form of counterfeiting—making or selling goods that bear a fake version of someone else's registered mark. The fake Rolex, the bogus Louis Vuitton bag, the counterfeit pharmaceuticals, the fake replacement airplane parts. The consequences here are uniquely severe, partly because counterfeiting can endanger public health and safety, not just brand value.

What Counts as a "Counterfeit"—and the Registration Prerequisite

The threshold definitions do a lot of work, so they are worth getting right. The Lanham Act defines a "counterfeit" as a "spurious mark that is identical with, or substantially indistinguishable from, a registered mark" (15 U.S.C. § 1127). The enhanced counterfeiting remedies—ex parte seizure and treble or statutory damages—apply only to a "counterfeit mark," which the statute defines more narrowly: the owner's mark must be registered on the Principal Register, in use, and registered for the very goods or services on which the counterfeit appears (15 U.S.C. § 1116(d)). Registration, in other words, is the price of admission to the harshest remedies. An unregistered brand owner still has ordinary infringement and unfair-competition claims, but not the counterfeiting cannon. (For when and how to lock in those rights, see when to trademark your brand.)

Counterfeiting is also broader than the cartoon version of a street vendor stitching fake logos. Courts have found counterfeit marks where defendants put non-genuine product into genuine packaging—refilling real Coca-Cola bottles with a different cola (United States v. Petrosian, 126 F.3d 1232 (9th Cir. 1997))—and where sellers passed off used, reconditioned equipment under original labels without disclosure (Westinghouse Electric Corp. v. General Circuit Breaker & Electric Supply, Inc., 106 F.3d 894 (9th Cir. 1997)). Repairing genuine goods with unapproved parts can even render the originally legitimate mark counterfeit (Rolex Watch, U.S.A., Inc. v. Michel Co., 179 F.3d 704 (9th Cir. 1999)). And the criminal Stop Counterfeiting in Manufactured Goods Act of 2006 closed a loophole for traffickers who sold loose labels, patches, and appliqués meant to be applied downstream. The throughline: "I only sold the labels" and "the bottle was real" are not the safe harbors people assume.

Civil Counterfeiting Under the Lanham Act

A trademark owner can sue under the Lanham Act for trademark infringement (15 U.S.C. § 1114) and unfair competition (15 U.S.C. § 1125(a)). When the infringement involves a counterfeit mark, the remedies escalate dramatically.

First, in a counterfeiting case, a court generally must award treble (triple) damages or profits and attorneys' fees absent extenuating circumstances (15 U.S.C. § 1117(b)). Second, because counterfeiters notoriously keep no honest records, the owner may instead elect statutory damages under 15 U.S.C. § 1117(c), which (after the PRO-IP Act of 2008) run from $1,000 to $200,000 per counterfeit mark per type of goods, rising to as much as $2 million per mark per type of goods if the counterfeiting was willful. Third, and remarkably, the owner can obtain an ex parte seizure order under 15 U.S.C. § 1116(d)—a court order, issued without warning the defendant, directing law enforcement to seize the counterfeit goods and records before the counterfeiter can hide or destroy them. There is no civil remedy quite like it elsewhere in IP law; it is the trademark owner's answer to the reality that counterfeiters vanish overnight. For the brand owner's offensive playbook, see drafting a trademark cease-and-desist letter.

Criminal Counterfeiting Under 18 U.S.C. § 2320

The criminal regime is where counterfeiting consequences turn truly grave. 18 U.S.C. § 2320 makes it a federal crime to intentionally traffic in goods or services using a counterfeit mark. The penalties are stark. For an individual, a first offense carries a fine of up to $2 million and imprisonment of up to ten years, or both. For an organization, the fine reaches $5 million. Repeat offenders face still harsher penalties—up to $5 million and twenty years for an individual—and trafficking in counterfeit goods that the offender knows or should know carry a serious risk of injury or death (think counterfeit drugs or military components) ratchets the maximums higher still, up to life imprisonment where death results. Convicted defendants also face mandatory forfeiture and may owe restitution to the victim under 18 U.S.C. §§ 2323, 3663, and 3664.

Consider an invented example. Suppose Roadrunner Imports buys 10,000 handbags bearing a "substantially indistinguishable" version of a famous registered logo and resells them online. Civilly, the brand owner can elect statutory damages and, if it proves willfulness, seek up to $2 million per mark—plus an ex parte seizure of the inventory. Criminally, the principals face § 2320 charges with seven-figure fines and years of potential imprisonment. The handbags cost Roadrunner perhaps $40 each; the legal exposure is measured in millions and in prison time. That asymmetry is the whole point of the counterfeiting statutes—Congress wanted the downside to vastly exceed the profit.

Customs Seizures: The Border Defense

There is a fourth front that catches counterfeiters before they ever reach a U.S. customer: U.S. Customs and Border Protection (CBP). A trademark or copyright owner can record its registered rights with CBP—a simple, low-cost online filing—which then gives CBP authority to detain, seize, and destroy infringing imports at the border under the Tariff Act (19 U.S.C. § 1526) and related provisions. Every year CBP seizes shipments with a manufacturer's-suggested-retail value running into the billions of dollars. For an importer of fakes, the consequence is not only losing the shipment but exposure to civil penalties—which can reach the domestic value the goods would have had if genuine—plus a referral that can seed a criminal investigation. Recordation is one of the most cost-effective enforcement tools a brand owner has, and it is a reason serious counterfeiters increasingly find the border an unfriendly place.

Patent "Piracy": Civil Only, but Far From Painless

Patents break the pattern. There is no criminal patent infringement—you cannot go to prison for making a patented gadget. Patent infringement is purely a civil matter, governed by 35 U.S.C. § 271, which defines direct infringement (§ 271(a)), active inducement (§ 271(b)), and contributory infringement (§ 271(c)). But "civil only" does not mean "minor." Patent damages can be staggering.

Under 35 U.S.C. § 284, a successful patent owner recovers damages "adequate to compensate for the infringement, but in no event less than a reasonable royalty"—often calculated as the royalty a willing licensor and licensee would have negotiated, or, where the patentee competes in the market, its lost profits. The court can also award up to treble damages for willful infringement, a standard the Supreme Court rewrote in Halo Electronics, Inc. v. Pulse Electronics, Inc., 579 U.S. 93 (2016). Halo discarded the rigid two-part test that had made enhanced damages hard to obtain and gave district courts broad discretion to punish "egregious," deliberate, piratical misconduct—which both raised the stakes for knowing infringers and made an opinion of counsel a more valuable shield. Add prejudgment interest and, in "exceptional cases," attorneys' fees under § 285, and a patent judgment can run into the hundreds of millions. The U.S. International Trade Commission can also bar infringing imports entirely under Section 337—an exclusion order, enforced by CBP at the border, that can shut a product out of the U.S. market overnight regardless of any damages award.

So while you cannot be imprisoned for patent infringement, treating someone else's patented technology as free can be a company-ending civil event. One more wrinkle bears on willfulness: under the patent marking statute (35 U.S.C. § 287), a patentee that sells products must mark them with the patent number (or a virtual-marking web address) to collect pre-suit damages from an infringer who lacked actual notice. The flip side is that proper marking puts the world on constructive notice—which makes it far harder for a later infringer to claim it did not know, and easier for the patentee to argue willfulness. The deeper mechanics are in what constitutes patent infringement; for the foundational picture of what patents even are, see utility patent basics.

Trade Secret Theft: The Quiet One With Teeth

Trade-secret piracy looks different from the others. There is no public copying—no torrent, no street vendor. It is usually an insider: the departing employee who copies the customer database, the engineer who emails source code to a personal account, the contractor who walks out with the secret manufacturing process. And it carries one of the most muscular dual civil-and-criminal regimes in all of IP law.

Civil: The Defend Trade Secrets Act and State Law

Since 2016, the Defend Trade Secrets Act (DTSA), codified at 18 U.S.C. § 1836, has provided a federal civil cause of action for trade-secret misappropriation, supplementing the state-law claims that nearly every state already provides under its version of the Uniform Trade Secrets Act (UTSA). The remedies are formidable: actual loss, the defendant's unjust enrichment, or a reasonable royalty; exemplary (punitive) damages up to twice the compensatory award for willful and malicious misappropriation; and attorneys' fees. The DTSA also offers a rare and powerful tool—an ex parte civil seizure order under § 1836(b)(2) that, in "extraordinary circumstances," lets a court order law enforcement to seize property to prevent the secret from being disseminated before the defendant even knows it has been sued. Courts have set a deliberately high bar for this remedy—requiring the applicant to show that an ordinary injunction would be inadequate and that the target would evade or destroy evidence—but its mere existence reflects how seriously the law treats trade-secret theft.

A threshold point determines whether any of this is available: the information must actually qualify as a trade secret, which requires both independent economic value from its secrecy and reasonable measures to keep it secret (18 U.S.C. § 1839(3)). The company that left the "secret" formula on an unrestricted shared drive may find it has no claim at all. That is why the strength of an enforcement case turns less on the villainy of the departing employee than on the housekeeping of the employer.

One drafting note that doubles as a consequence: to recover exemplary damages or fees under the DTSA against an employee, the employer must have given that employee the statutory whistleblower-immunity notice (§ 1833(b)) in the relevant agreement. This is why every well-drafted modern confidentiality agreement contains that notice—and why a company that skipped it may forfeit its enhanced remedies. See drafting enforceable non-disclosure agreements for technology transactions.

Criminal: The Economic Espionage Act

The criminal teeth come from the Economic Espionage Act of 1996 (EEA). Two provisions matter most:

  • 18 U.S.C. § 1832 criminalizes the theft of trade secrets related to a product or service used in interstate or foreign commerce, for the economic benefit of someone other than the owner. Individuals face up to ten years' imprisonment and substantial fines; organizations face fines up to the greater of $5 million or three times the value of the stolen secret, including expenses for research and design and other costs of reproducing the secret.
  • 18 U.S.C. § 1831 is the more serious cousin: theft intended to benefit a foreign government, instrumentality, or agent. Penalties run to fifteen years' imprisonment for individuals and fines up to $10 million or three times the value of the secret for organizations.

The federal government prosecutes EEA cases vigorously, and they frequently arrive with companion charges. An employee who copies proprietary files to a personal account may also face wire-fraud charges (18 U.S.C. § 1343) or interstate-transportation-of-stolen-property charges (18 U.S.C. § 2314). One important limit, though: the Computer Fraud and Abuse Act (18 U.S.C. § 1030)—sometimes invoked against employees who misuse access—was narrowed by the Supreme Court in Van Buren v. United States, 593 U.S. 374 (2021), which held that someone authorized to access information does not "exceed authorized access" merely by using it for an improper purpose. That decision made the CFAA a weaker tool against insiders who had legitimate credentials, which in turn pushed enforcers back toward the EEA and the DTSA, where the wrong is the taking of the secret rather than the manner of access.

A short worked example. Imagine an engineer, departing Globex Industries for a competitor, who copies the company's proprietary catalyst formula onto a thumb drive the night before resigning. Civilly, Globex can sue under the DTSA and state law for the formula's value, double it for willfulness, recover fees, and potentially obtain a seizure order. Criminally, if Globex refers the matter, the engineer is exposed under § 1832 to up to a decade in prison. If the new "competitor" turns out to be foreign-state-affiliated, § 1831 raises the ceiling to fifteen years. The thumb drive cost ten dollars; the consequence can be a federal prison sentence. To understand what counts as a protectable secret in the first place and how companies build defensible programs, see building a trade secret protection program from scratch.

The Consequences the Statutes Don't Mention

Everything above is the legal exposure. But the most underrated consequences of IP piracy are the ones no statute lists.

Reputational and business harm. A company found to be running unlicensed software, or selling counterfeits, or built on a foundation of trade-secret theft, carries that finding into every future deal. Acquirers run IP due diligence; an infringement judgment or a software-audit settlement is a red flag that can shave value off a sale or kill it. Enterprise customers ask vendors to warrant non-infringement; a documented history makes those warranties hard to give. The civil judgment is a one-time cost; the reputational damage compounds.

Personal and professional fallout for individuals. An EEA conviction is a felony. A § 2320 counterfeiting conviction is a felony. Felonies follow people—through professional licensing, immigration status, security clearances, and employment. The five-figure download settlement is a financial event; the federal felony is a life event.

The injunction problem. A money judgment you can pay and move on from. An injunction reorders your operations. A business ordered to stop using infringing software, recall counterfeit inventory, or destroy work product built on a stolen secret may find that the injunction—not the damages—is what actually ends the enterprise.

Attorneys' fees and litigation cost. Even a "small" infringement case can generate six figures in legal fees before anyone reaches a verdict, and several of the regimes above shift those fees to the loser. Many defendants settle not because they are clearly liable but because the cost of being proven not liable exceeds the cost of paying to make the case disappear. That asymmetry is itself a consequence of choosing to flirt with the line.

How to Stay on the Right Side of the Line

The flip side of all this risk is that staying clear of it is mostly a matter of habits, not heroics. A few principles cover the vast majority of real-world situations:

  • License what you use. For software, fonts, stock photos, music, and code, buy the right number of seats and respect the scope of the license. Most corporate copyright exposure comes from over-deployment, not malice—and a yearly reconciliation of seats deployed against seats purchased is the cheapest insurance there is.
  • Don't sell what you didn't make—unless you're sure of the chain of title. Counterfeiting prosecutions and civil counterfeiting judgments overwhelmingly hit people who "didn't ask too many questions" about suspiciously cheap branded goods.
  • Respect the exit. When employees leave, the trade-secret danger zone is the final two weeks. Clean offboarding—revoking access, reminding departing staff of their obligations, collecting devices, and using NDAs that contain the DTSA notice—prevents most cases.
  • Build neutral tools, market them neutrally. If you operate a platform, Grokster is your cautionary tale: do not advertise to infringers, do implement reasonable anti-infringement measures, and do honor DMCA notices and maintain a real repeat-infringer policy.
  • When you're unsure, get a freedom-to-operate or clearance analysis. Whether you are launching a product or adopting a brand, a clearance check is far cheaper than a judgment. See how to conduct a comprehensive trademark clearance search.

And if you are on the other side—if someone is pirating your work—the consequences described above are also your toolkit. Register your copyrights early so the statutory-damages cannon is loaded; record your trademarks and registered copyrights with CBP; send DMCA notices; and, for the serious cases, talk to counsel about ex parte seizure and criminal referral. The same statutes that make piracy dangerous make enforcement effective.

Key Takeaways

  • Penalties aren't pegged to the price of the work. Copyright statutory damages run $750–$30,000 per work, up to $150,000 per work for willful infringement (17 U.S.C. § 504(c)). "Per work" is what turns small acts into large judgments.
  • Registration unlocks the big remedies. Without a timely registration, a copyright owner is limited to actual damages and generally cannot even sue (17 U.S.C. §§ 411, 412; Fourth Estate, 586 U.S. 296).
  • Software over-deployment is the everyday face of copyright piracy, enforced through BSA-style audit letters where the statutory-damages threat drives settlements far above the back-license cost.
  • Willful, commercial, or high-volume copyright piracy is a federal crime under 17 U.S.C. § 506 and 18 U.S.C. § 2319, with prison terms up to five years (more for repeat offenders); the NET Act criminalized non-commercial high-volume sharing, and the 2020 streaming felony (18 U.S.C. § 2319C) targets pirate streaming operators.
  • Counterfeiting carries the harshest regime: treble damages and up to $2 million per mark in civil statutory damages (15 U.S.C. § 1117(c)), plus criminal penalties under 18 U.S.C. § 2320 reaching $2 million and ten years for an individual on a first offense—and ex parte seizures and customs interdiction on top.
  • Patent infringement is civil-only but can mean treble damages (35 U.S.C. § 284; Halo, 579 U.S. 93) and an ITC import ban under Section 337.
  • Trade-secret theft is both civil (DTSA, 18 U.S.C. § 1836) and criminal (EEA, 18 U.S.C. §§ 1831–1832), with up to fifteen years' imprisonment for foreign-benefit theft—provided the owner took reasonable measures to keep the information secret.
  • You can be liable for someone else's piracy through contributory, vicarious, and inducement theories—Grokster, 545 U.S. 913, is the rule that ends businesses built to foster infringement.
  • The worst consequences are often the unlisted ones: injunctions, fee-shifting, felony records, and reputational damage that outlasts any check you write.

Frequently Asked Questions

Can I really be sued for tens of thousands of dollars over a single downloaded song? Yes. Copyright statutory damages run from $750 to $30,000 per work (17 U.S.C. § 504(c)), and up to $150,000 per work if the infringement was willful. Courts have awarded $9,250 and $22,500 per song in the file-sharing cases (Capitol Records v. Thomas-Rasset; Sony BMG v. Tenenbaum). The award is not tied to the song's retail price. In practice, rights-holders often offer to settle individual cases for a few thousand dollars, and smaller disputes increasingly go to the Copyright Claims Board (capped at $30,000), but the federal statutory exposure is real and large.

Is it a crime to pirate movies or music, or just a civil matter? Both regimes exist. Most enforcement against individuals is civil. But willful infringement that is either for financial gain, involves more than $1,000 of retail value within 180 days, or distributes a pre-release work is a federal crime under 17 U.S.C. § 506, punishable by up to five years' imprisonment (more for repeat offenders). Criminal prosecutions are aimed overwhelmingly at commercial-scale operators and pirate-streaming services, not casual viewers.

Is streaming a pirated movie illegal even if I don't download it? Watching an unauthorized stream is not what the 2020 streaming-felony law (18 U.S.C. § 2319C) targets—that statute is aimed at the operators of commercial pirate streaming services, not at individual users. That said, the legal landscape is nuanced and evolving, and the safest course is to use licensed services. The criminal exposure for running a pirate streaming business, however, is now felony-grade.

My company grew and now has more software installs than licenses. How bad is that? This is the most common form of corporate copyright piracy, and it is taken seriously. Software publishers and coalitions like the BSA enforce it through "self-audit" demand letters backed by the statutory-damages threat (up to $30,000 per title, or $150,000 if willful, under § 504(c)), which usually produces a settlement well above the cost of the missing licenses—plus a likely breach-of-contract claim under the license itself. The fix is unglamorous but effective: reconcile deployed seats against purchased entitlements before someone else does it for you.

Can I get in trouble for making a tool that other people use to pirate? Possibly. Under the Grokster inducement rule (MGM v. Grokster, 545 U.S. 913), distributing a product "with the object of promoting its use to infringe," shown by marketing or other affirmative steps, creates liability for the resulting infringement. Neutral technology with substantial lawful uses is protected (Sony v. Universal, 464 U.S. 417), but a tool built and promoted as an infringement machine is not. Platforms should also honor DMCA notices and maintain a genuine repeat-infringer termination policy to keep their safe harbor (see BMG v. Cox).

What's the difference between trademark counterfeiting and ordinary infringement? Counterfeiting is the aggravated form: using a mark that is identical or substantially indistinguishable from a registered mark on the very goods it covers—fakes, in plain terms. It triggers enhanced remedies the rest of trademark law does not: mandatory treble damages (15 U.S.C. § 1117(b)), statutory damages up to $2 million per mark (§ 1117(c)), ex parte seizures, and federal criminal liability under 18 U.S.C. § 2320, including up to ten years in prison for a first offense. A key prerequisite is registration: the enhanced "counterfeit mark" remedies require a mark registered and in use for the very goods at issue.

Can I go to prison for patent infringement? No. There is no criminal patent infringement—it is purely a civil matter under 35 U.S.C. § 271. But the civil consequences can still be enormous: a reasonable royalty or lost profits, up to treble damages for willful infringement (Halo, 579 U.S. 93), attorneys' fees in exceptional cases, and an ITC order under Section 337 barring infringing imports at the border.

My former employee took confidential files. What can I do, and what does he risk? You may have civil claims under the federal Defend Trade Secrets Act (18 U.S.C. § 1836) and your state's trade-secret law, with remedies including damages, up to double exemplary damages for willful misappropriation, attorneys' fees, injunctions, and in extraordinary cases an ex parte seizure order. The employee may also face criminal exposure under the Economic Espionage Act (18 U.S.C. § 1832), with up to ten years' imprisonment—rising to fifteen years if the theft was meant to benefit a foreign government (§ 1831). The strength of your civil case depends heavily on whether you took reasonable measures to keep the information secret, and whether your agreements contained the DTSA whistleblower-immunity notice needed to unlock enhanced damages and fees.

How do copyright owners find anonymous online infringers? Typically by logging the infringer's IP address as it shares files, then filing suit and subpoenaing the internet service provider to unmask the subscriber. They also use DMCA takedown notices to platforms, which remove the content and may strike or terminate the account. Online piracy is far less anonymous than people assume.

Does it matter whether I knew I was infringing? Very much. In copyright, proven willfulness raises the statutory-damages ceiling to $150,000 per work, while a proven innocent infringer may have damages reduced to as little as $200 per work (17 U.S.C. § 504(c))—though a proper copyright notice usually forecloses the innocent-infringer defense (§ 401(d)). Willfulness also drives treble damages in patent (Halo) and counterfeiting cases, and exemplary damages in trade-secret cases. Documents showing you knew—or recklessly disregarded—the infringement are the most damaging evidence a defendant can produce.

Related Articles

This article provides general information about intellectual property law and is not legal advice. The law varies by jurisdiction and changes over time, and how it applies depends on the specific facts of your situation. For advice about a particular matter, consult qualified counsel licensed in your jurisdiction. mclaw.io