Torrenting Legality: Copyright Notices and What a VPN Can't Fix

The technology is legal; the content decides

Torrenting moves files by pulling pieces from many people at once. Plenty of lawful material is shared this way: Ubuntu's download page, for example, offers BitTorrent downloads of its desktop and server images and describes BitTorrent as a peer-to-peer download network that can sometimes give higher speeds. Many creators also release work under licenses that allow copying.

The problem starts when the file is a copyrighted film, show, game, book or paid software and you have no permission to copy it. That is generally infringement whether you got it by torrent, from a file-hosting site or from a friend. The method does not decide legality. The permission does.

Why torrenting is easy to notice

When you share a file, your IP address is visible to the other participants in the same swarm, because your device has to connect to them. Rights holders and the firms they hire can join a popular swarm, record IP addresses and timestamps, and try to link those addresses to internet customers. Your client usually uploads pieces while it downloads, so you are distributing as well as receiving. Shared homes and public Wi-Fi complicate attribution, because the address belongs to the account holder, not necessarily the person at the keyboard.

How the DMCA notice process works

In the United States, the Digital Millennium Copyright Act added section 512 to Title 17. As read on Cornell's Legal Information Institute and the Copyright Office's copy of Title 17:

• Notice contents (512(c)(3)). An effective notice goes to the provider's designated agent in writing and substantially includes a signature of someone authorized to act for the rights holder, identification of the copyrighted work and of the allegedly infringing material, contact details, a statement of good-faith belief that the use is unauthorized, and a statement, under penalty of perjury, that the information is accurate and the sender is authorized.
• ISP safe harbor (512(a)). A provider that merely transmits or routes material, and meets listed conditions such as not initiating or selecting the material, is shielded from monetary liability for that transmission.
• Repeat-infringer policy (512(i)). To qualify for the safe harbors, a provider must have adopted and reasonably implemented, and told its subscribers about, a policy for terminating "in appropriate circumstances" the accounts of repeat infringers. How an ISP applies that is up to its own policy, so outcomes differ.
• Counter-notice (512(g)). For material a service hosts, a subscriber can send a counter-notice, and the material is generally restored 10 to 14 business days later unless the complainant files a court action. This mainly concerns hosted content, not a notice forwarded about your home connection.
• Subpoena to identify someone (512(h)). A rights holder can ask a district court clerk to issue a subpoena to a provider to identify an alleged infringer, supported by a copy of a compliant notice, a proposed subpoena and a sworn declaration. We did not research case law on which provider types this reaches.

A notice is not a lawsuit and not proof of wrongdoing, since addresses can be shared or misattributed. It is still a warning to take seriously.

What the money side looks like: section 504

Under 17 U.S.C. 504(c), a copyright owner may elect, at any time before final judgment, to recover statutory damages instead of actual damages and profits. The court sets an award "not less than $750 or more than $30,000" for all infringements involved in the action with respect to any one work, as it considers just. If the owner proves willful infringement, the court may increase the award to "not more than $150,000." If the infringer proves they were unaware and had no reason to believe their acts were infringement, the court may reduce it to "not less than $200." The statute adds a remission rule for certain nonprofit educational, library and archive employees who reasonably believed their use was fair use.

These are the statutory ranges, not predictions. Other conditions apply to claiming statutory damages that we did not review, and outcomes depend on the facts and the court. Other countries have their own rules.

What a VPN does change

• It hides your real IP address from the swarm. Peers, including monitoring firms, see the VPN server's address instead.
• It hides your traffic from your ISP. The ISP sees an encrypted tunnel. Our explainer on what your ISP can see has the details.
• It may stop throttling aimed at torrent traffic, if your ISP slows P2P based on what it can see. That is not guaranteed.

What a VPN does not fix

• The law. An infringing download stays infringing with a VPN on.
• The provider's own records. You are trusting the VPN company not to keep identifying logs. Policies vary and not every claim is independently checked. See what a no-logs policy actually means.
• Jurisdiction. Where the provider is based affects what it can be compelled to disclose, but it is not an invisibility shield. See data retention laws and VPN jurisdiction.
• Connection drops. If the VPN disconnects while your client runs, the client may keep sharing on your real address. A kill switch helps, as in our kill switch guide.
• Provider rules. Some providers limit P2P on certain servers, and all have terms against unlawful use.

Lower-risk ways to use torrents

Stick to material you have the right to copy: open-licensed software, public-domain works, your own files, and releases whose license welcomes sharing. Check the license before you download, not after. If a title is on a legal streaming service, in a library or for sale, that route carries no copyright risk. For technical settings on lawful files, see VPN for torrenting and the best VPN for torrenting. Those pages are about configuration, not permission to infringe.

If you receive a copyright notice

1. Read what it says and which file it names. Do not panic and do not ignore it.
2. Stop the activity in question on every device in the household.
3. Do not send admissions, and do not pay anyone who contacts you privately before you understand the notice.
4. Check your ISP's process, and get advice from a lawyer or legal aid service if a legal claim or settlement demand is involved.

For VPN legality itself, see is a VPN legal, which covers VPN use rather than what you do over one.

Frequently Asked Questions