Software piracy has been around since software itself, but the tactics keep changing. Cracked installers passed around on forums have given way to resold streaming credentials, cloned mobile apps, AI-generated mirror sites, and license-key marketplaces.
This guide explains what software piracy means, how it spreads, what the law says, and the practical steps software companies can take to detect, report and stop it.
TL;DR
- Software piracy is the unauthorized copying, distribution, sale, modification, access or use of software outside the rights holder’s permission or license terms.
- Common types include cracked downloads, license-key resale, credential sharing, cloned apps, modded APKs, cheats, hacks and counterfeit software.
- An estimated 37% of software installed on personal computers worldwide is unlicensed, with a commercial value of roughly $46.3 billion.
- Software piracy can expose users to malware, deprive publishers of revenue, increase support costs and damage brand trust.
- In the US, software piracy can trigger copyright claims, statutory damages, anti-circumvention claims and, in some commercial-scale cases, criminal penalties.
- Prevention works best when legal protections, licensing controls, technical safeguards and continuous monitoring are used together.
What is software piracy?
Software piracy is the unauthorized copying, distribution, sale, modification, access or use of software without permission from the copyright holder.
In most cases, when a customer buys software, they are buying a license to use it under specific terms. They are not buying ownership of the underlying code. Copying, distributing, reselling or modifying the software outside those terms can violate copyright law, license terms or both.
The exact legal route depends on the behavior involved. Unauthorized copying or distribution may be copyright infringement. Bypassing activation tools or digital rights management may raise anti-circumvention issues. Misusing a subscription or sharing credentials may breach the software’s license agreement.
Under US copyright law, copyright holders have exclusive rights to reproduce and distribute their works under 17 U.S.C. § 106, and infringement is addressed under 17 U.S.C. § 501.
Software piracy, software theft and license misuse
The terms are often used together, but they are not always identical.
| Term | Meaning |
| Software piracy | Unauthorized copying, distribution, sale, access or use of software |
| Software theft | Common non-legal term often used to describe software piracy |
| License misuse | Use that violates the EULA, seat limits or subscription terms |
| Copyright infringement | Legal claim based on unauthorized use of protected software rights |
| Circumvention | Bypassing access controls, activation systems or DRM |
This matters because enforcement depends on the type of abuse. A cracked installer, a resold subscription account and a fake app can all be software piracy risks, but each may require different evidence and a different takedown route.
Types of software piracy
Software piracy takes several forms. Most software companies deal with more than one at the same time.
End-user piracy
End-user piracy happens when an individual or organization installs software on more devices than the license allows.
This is common in business environments where teams grow faster than license renewals, or where employees reuse old installation files without checking whether the license still applies.
Client-server overuse
Client-server overuse happens when a business runs more copies of a network-licensed application than it has paid seats for.
This is often less visible than public piracy, but it can still create serious compliance and revenue issues for software publishers.
Hard-disk loading
Hard-disk loading happens when a computer reseller preinstalls unlicensed software on devices as a sales incentive.
The buyer may think the software is legitimate, but the reseller has not provided a valid license.
Internet piracy and cracked downloads
Internet piracy includes cracked installers, activation bypasses, key generators and full software packages shared through piracy sites, torrent trackers, peer-to-peer networks and cyberlockers.
This is one of the most visible forms of software piracy because it directly competes with legitimate downloads and subscription offers.
Counterfeit software
Counterfeit software is packaged or presented to look like a genuine product.
It may include fake branding, copied packaging, cloned download pages or marketplace listings that imitate authorized resellers. Counterfeit software is especially harmful because users may believe they are buying from a legitimate source.
Unauthorized license key and account resale
Some sellers offer license keys, activation codes, streaming accounts, gaming accounts or SaaS credentials through marketplaces, social platforms and messaging apps.
These may be stolen, generated, reused, region-restricted, obtained through fraud or sold in violation of the software’s license terms.
Credential and account sharing
Credential sharing happens when one valid account is sold or shared among users who have not paid for their own access.
This affects subscription software, streaming platforms, e-learning products, gaming accounts and other digital services. Cookie sharing is a related tactic, where users are given session data instead of a username and password.
Cheats and hacks
Cheats and hacks are unauthorized tools that modify software behavior, bypass access controls or give users unfair access to paid features, game assets or restricted functionality.
For gaming companies, this can damage revenue and player trust at the same time.
Fake apps and modded APKs
Fake apps and modded APKs mimic a legitimate application’s name, logo or functionality to trick users into downloading an unauthorized version.
Some are built to bypass paid features. Others are designed to collect data, deliver malware or redirect users to fraudulent services.
How pirated software spreads in 2026
Software piracy no longer depends on one channel. Pirates use a mix of open, closed and fast-moving distribution routes.
Common channels include:
- Search engines: Piracy pages are optimized to rank for terms like “free download,” “crack,” “license key,” “mod APK” or “premium unlocked.”
- Piracy sites and cyberlockers: Dedicated sites host or link to cracked files, key generators and installers.
- Torrents and P2P networks: Large software packages are broken into pieces and shared across many users.
- Marketplaces: Sellers list license keys, accounts and installation files alongside legitimate digital products.
- Social platforms: Posts, profiles, groups and ads drive traffic to pirated downloads or account resale.
- Video platforms: Tutorial videos explain how to install cracked versions, often with download links in the description.
- App stores and APK sites: Fake apps and modded apps appear in official stores, third-party app stores and APK repositories.
- Messaging apps: Bad actors use invite-only Telegram groups, Discord servers, and other closed communities to share accounts, keys, and download links.
- AI-generated mirror sites: Generative AI tools make it easier to create new pages, descriptions and mirror sites after takedowns.
This is why manual monitoring breaks down quickly. A piracy link removed from one channel can reappear on another within hours.
Software piracy by the numbers
Industry-wide data on software piracy is limited, but BSA’s Global Software Survey remains one of the most widely cited global benchmarks for unlicensed software use.
- 37% of software installed on personal computers worldwide was unlicensed.
- The commercial value of unlicensed software was estimated at $46.3 billion.
- Malware associated with unlicensed software can cost companies worldwide nearly $359 billion a year.
Those figures are not new, and they mainly reflect PC software. But the underlying issue has not disappeared. It has expanded into subscriptions, mobile apps, gaming accounts, streaming access, marketplaces and closed communities.
Software piracy laws and penalties
Software piracy is usually addressed through copyright law, license agreements, anti-circumvention rules and platform policies. The legal basis depends on the conduct and the country where enforcement takes place.
This section focuses on the US as an example. It is general information only and is not legal advice.
Copyright infringement
In the US, copyright holders have exclusive rights to reproduce, distribute and license protected works under 17 U.S.C. § 106. A person or business that violates those rights may be treated as an infringer under 17 U.S.C. § 501.
For software companies, this can apply to unauthorized copies, cracked downloads, pirated installers and certain types of unauthorized distribution.
Civil damages
A court can award statutory damages from $750 to $30,000 per infringed work. If the court finds that infringement was willful, damages can rise to up to $150,000 per work under 17 U.S.C. § 504.
Copyright owners may also seek actual damages and profits, depending on the case.
Criminal penalties
Certain commercial-scale copyright offenses can also carry criminal penalties.
Under 18 U.S.C. § 2319, a first offense involving reproduction or distribution of at least 10 copies, with a total retail value above $2,500 within a 180-day period, can carry up to five years in prison, a fine, or both. Fines can reach up to $250,000 for individuals under 18 U.S.C. § 3571.
Anti-circumvention
The Digital Millennium Copyright Act also addresses tools or services that bypass technological protection measures, such as activation systems, encryption or DRM.
That can be relevant when piracy involves cracks, key generators, modified installers or tools designed to defeat access controls.
The real cost of software piracy
Revenue loss
Pirated copies, shared credentials and resold license keys reduce direct revenue. For subscription products, the loss compounds when users continue accessing the product without becoming paying customers.
Security risk
Pirated software is often modified before distribution. Cracked installers may remove integrity checks, disable updates or bundle malware.
Users face data theft, device compromise and business-network exposure. Brands may also receive support complaints for unsafe versions they did not release.
Unfair competition
Pirated listings appear in the same search results, social feeds, marketplaces and video tutorials as legitimate offers.
They undercut official pricing, divert demand and dilute the return on paid and organic acquisition.
Reputational damage
A user who downloads a broken or malware-laden pirated version may still blame the original brand.
For software companies, visible piracy can also signal weak IP control to investors, partners and enterprise buyers.
Operational cost
Piracy creates work for support, legal, trust and safety, product and revenue teams.
Teams spend time answering complaints, verifying licenses, collecting evidence, filing takedowns, tracking repeat offenders and correcting confusion created by fake or unauthorized versions.
How to prevent software piracy
No single tactic stops piracy completely. The strongest programs combine legal, technical and monitoring controls.
1. Register your software copyright
Copyright protection can exist automatically when original software code is created and fixed in a tangible form. Registration gives software companies a stronger enforcement position.
In the US, the Copyright Office explains that registration creates a public record, and for US works, registration is required before bringing an infringement lawsuit in federal court. Timely registration can also affect eligibility for statutory damages and attorney’s fees.
The US Copyright Office provides specific guidance on copyright registration for computer programs.
2. Use clear licenses and EULAs
A clear End-User License Agreement should explain what users can and cannot do with the software.
It should define:
- Number of permitted users or devices
- Restrictions on copying, sharing and resale
- Rules for account access and credential sharing
- Territory or use-case limits
- Subscription terms
- Prohibited modification or reverse engineering
- Consequences for misuse
Strong license language helps enforcement teams distinguish between legitimate use, license misuse and public piracy.
3. Strengthen license verification
License checks should not rely only on the local device.
Where possible, use server-side verification, account-level controls, subscription checks and device limits. For higher-risk products, consider anomaly detection for repeated activations, impossible travel, shared cookies, suspicious logins or unusual account resale patterns.
4. Use code obfuscation and tamper detection
Obfuscation makes source or compiled code harder to understand, reverse engineer or modify.
Tamper detection helps identify when code has been altered to bypass activation, remove payment checks or unlock restricted features. The goal is not to make piracy impossible, but to increase the effort required and slow down redistribution.
5. Add watermarking or fingerprinting
Watermarking can help prove authorship or trace which licensed copy became the source of a leak.
Some companies use identical watermarks to show ownership. Others use unique fingerprints to identify which customer, partner or build was connected to an unauthorized release.
6. Monitor piracy channels continuously
Legal and technical controls only help if you know when they have been bypassed.
Software companies should monitor search engines, marketplaces, app stores, social platforms, video platforms, cyberlockers, piracy sites, forums and messaging apps for infringing downloads, resale offers, fake apps and credential sharing.
7. Remove and report confirmed infringements quickly
Speed matters. The longer a piracy page stays live, the more downloads, installs, resales and mirror pages it can generate.
Use the right route for each case:
- DMCA notices for copyright-infringing pages
- Marketplace reports for license-key resale or counterfeit software
- App store reports for fake or infringing apps
- Search engine delisting for piracy URLs
- Hosting provider and registrar escalation for piracy sites
- Internal license enforcement for business misuse
For practical templates and process guidance, see Red Points’ guides to DMCA takedowns for software piracy.
How to report software piracy
Several industry organizations accept software piracy reports directly:
- Business Software Alliance
- Software and Information Industry Association
- Federation Against Software Theft
For a specific pirated download page or listing, a DMCA takedown notice sent to the relevant platform, hosting provider or online service provider is often the most direct route.
The US Copyright Office explains that a copyright owner or authorized agent can use the DMCA designated agent directory to find the right contact for a service provider hosting allegedly infringing material.
Before filing, gather:
- The infringing URL
- Screenshots
- Product name and version
- Copyright registration or ownership evidence
- License terms or EULA excerpts
- Proof that the content is unauthorized
- Seller, uploader or account details
- Download links, if safe to collect
- Marketplace, hosting or platform information
Good evidence helps platforms act faster and reduces avoidable pushback.
How Red Points helps protect software from piracy
Manual monitoring stops scaling the moment your software becomes a target worth pirating.
Red Points’ Anti-Piracy Solution helps software, gaming and digital-content companies detect, validate, remove and report piracy across the channels where it actually spreads.
Detect
Red Points monitors search engines, marketplaces, social media, video platforms, app stores, cyberlockers, piracy sites and messaging apps for software piracy risks.
That can include:
- Cracked installers
- Pirated download links
- Fake apps
- Modded APKs
- License-key resale
- Account and credential sharing
- Cookie sharing
- Cheats and hacks
- Impersonation sites
Validate
Red Points validates potential infringements before enforcement using the brand’s IP rights, evidence, approved rules, product information and enforcement scope.
This helps prioritize confirmed incidents and reduce unnecessary action against legitimate content.
Delist and remove
Once an incident is confirmed, Red Points uses the relevant enforcement route.
That can include search engine delisting, DMCA takedown notices, marketplace reports, app store reports, social media enforcement, hosting provider escalation and registrar escalation.
The goal is to make pirated software harder to find and remove access points before they spread further.
Measure
Red Points centralizes piracy cases, evidence, enforcement status and reporting in one platform.
Brands can track removals, pushbacks, repeat offenders, reappearing links and channel trends, then use that data to improve the program over time.
Software company case study
Kaspersky: Red Points’ anti-piracy program removed over $1.6M in value of infringing listings and took down more than 4,400 infringements at a 93.5% enforcement success rate.
“Red Points gives us visibility across global marketplaces and everything is consolidated in a very easy to use platform,” said David Mole, Global Digital Senior Marketplaces Manager at Kaspersky.
Request a demo to see how Red Points can help detect and remove software piracy at scale.
Frequently asked questions
What is software piracy?
Software piracy is the unauthorized copying, distribution, sale, modification, access or use of software without permission from the copyright holder or outside the terms of the software license.
Is software piracy the same as software theft?
The terms are often used interchangeably. “Software theft” is a common non-legal term for unauthorized software use, while “software piracy” is the more common industry term. Legally, the issue is usually copyright infringement, license misuse, anti-circumvention, or a combination of these.
What are the main types of software piracy?
The main types include end-user piracy, client-server overuse, hard-disk loading, cracked downloads, counterfeit software, unauthorized license-key resale, credential sharing, cheats and hacks, fake apps and modded APKs.
Is software piracy illegal?
Yes. In most countries, unauthorized copying or distribution of software can violate copyright law. Some conduct may also breach license terms, platform policies or anti-circumvention laws.
What are the penalties for software piracy in the US?
Civil statutory damages can range from $750 to $30,000 per infringed work, and up to $150,000 per work for willful infringement. Certain commercial-scale offenses can also carry criminal penalties, including prison time and fines.
How common is software piracy?
BSA’s Global Software Survey found that 37% of software installed on personal computers worldwide was unlicensed, with a commercial value of $46.3 billion. The current piracy landscape also includes subscription abuse, account sharing, fake apps and license-key resale.
Is downloading cracked software dangerous?
Yes. Cracked software may contain malware, spyware, credential stealers or modified code. It may also disable security updates and integrity checks, leaving users more exposed to future attacks.
How can companies detect software piracy?
Companies can monitor search engines, piracy sites, cyberlockers, marketplaces, social platforms, video platforms, app stores and messaging apps for cracked downloads, fake apps, resale listings, shared credentials and suspicious seller patterns.
How can software companies stop piracy?
The strongest approach combines copyright registration, clear licenses, server-side verification, access controls, obfuscation, watermarking, continuous monitoring and fast enforcement through DMCA notices, platform reports, delisting and legal escalation where appropriate.
How do I report software piracy?
You can report software piracy to organizations like BSA, SIIA or FAST. For a specific infringing URL, listing or download page, a DMCA takedown notice to the platform, host or service provider is often the most direct path.
