Streaming piracy isn't just a headache for Hollywood — it's a growing liability for payments companies. In a recent LegitScript webinar, a merchant monitoring analyst and fraud investigation specialist walked through how illicit IPTV works, why it almost always involves transaction laundering, and what payments teams should look for when assessing merchant risk.
Read the key takeaways and then watch the webinar on demand.
April 16, 2026 | by LegitScript Folks
Illicit IPTV Is Essentially a Transaction Laundering Problem
This is the single most important insight from the webinar: If you're not explicitly supporting IPTV merchants, you may still have transaction laundering for illicit IPTV sitting in your portfolio.
According to LegitScript's monitoring data, IPTV sellers accepting credit cards are engaged in transaction laundering approximately 75% of the time. Only one in four are making direct sales. Why? Because merchants who attempt to sell pirated IPTV directly tend to get their accounts shut down quickly, making laundering their best workaround.
This laundering typically takes the form of a clean-looking front website selling some unrelated digital service, with the actual IPTV transaction happening off to the side. IPTV is consistently one of the top verticals for transaction laundering in LegitScript's annual reports, year after year.
Illicit IPTV Takes Many Forms
IPTV itself refers to internet protocol television: any television or film content streamed over the internet, whether live channels, sports, or video on demand. Legitimate providers include household names like Disney+, Netflix, and Hulu, as well as a long tail of smaller platforms serving niche audiences.
IPTV becomes violative when content is offered without proper licensing, when premium content is bundled without rights agreements, or when geographic restrictions are deliberately bypassed.
Violative IPTV shows up in several ways:
- Subscription services advertising thousands of live channels or premium bundled content — a scale that no legitimate small operator can match
- "Fully loaded" devices marketed with language suggesting preloaded, unrestricted access to content
- Resold or redistributed streams, the digital equivalent of reselling gift cards without authorization
- Cyberlocker and torrent access, sometimes packaged as special file links as an obfuscation technique that keeps illicit behavior less visible
Critically, both high-effort, polished-looking websites and low-effort, bare-bones storefronts can be violative. A sleek website doesn't signal legitimacy; it may just mean the merchant invested in AI-powered web design tools.
Know How to Conduct a Risk Assessment
IPTV products and services often look legitimate at first glance. That's why having a structured approach to risk analysis matters.
LegitScript analysts use a Signal → Context → Decision framework:
- Signal: Something looks off. Is the content offering realistic? Are they advertising premium channels from major networks? Is the device being marketed as "fully loaded"?
- Context: Is it actually risky? Consider the legitimacy of the business — does it have a real web presence, social media history, or customer reviews? Are geo-restrictions actively bypassed? Does the marketing suggest infringement even if the product itself is neutral hardware?
- Decision: What's the risk level, and how should it be communicated? High-confidence violations — clear copyright infringement, BRAM/VIRP exposure — warrant different handling than moderate signals, such as a jailbroken device with ambiguous marketing language.
For IPTV risk analysis, four questions anchor every assessment:
- What is being sold?
- How is it being marketed?
- What access is being offered?
- Are there payment or behavior signals?
Armed with these, analysts can move from noise to actionable signal.
Trends and Tactics Change. You Need Eyes on the Market.
The landscape is not static. The front businesses used for IPTV transaction laundering shift over time; currently, AI-adjacent services, SEO and marketing firms, web hosting companies, e-book stores, and vague “business services” are among the most common covers.
Generative AI has made this harder. Professional-looking websites that used to take hours of effort to produce can now be assembled in minutes. The low-effort laundering site is becoming increasingly difficult to distinguish from a legitimate business at first glance.
At the same time, sellers are adapting their behavior in other ways. LegitScript analysts have observed a growing trend of IPTV merchants directing buyers to messaging platforms like WhatsApp or Telegram for checkout rather than redirecting to a new URL. This attempt to stay off the radar is typically a red flag.
The financial stakes are real. LegitScript flagged thousands of illicit IPTV merchants in the past year. With card network fines potentially reaching millions of dollars in aggregate exposure each quarter, staying ahead of evolving tactics is essential.
Partnering with a monitoring expert is one of the most effective ways to keep pace. LegitScript combines one of the world's largest fraud network databases, AI-enhanced website scanning technology, and human analyst expertise to identify illicit merchant activity that automated tools alone would miss.
Want to See How Your Merchants Stack Up?
For a limited time, qualified organizations can receive five free merchant risk scans — a detailed analysis covering compliance flags, restricted products, suspicious activity, and policy alignment issues. Visit our free pilot page to learn more.
Questions about transaction laundering, policy consultation, or merchant monitoring? Reach out at legitscript.com/contact.
Illicit IPTV
The full webinar recording is available on-demand.
