German investigators have struck a significant blow against illegal IPTV operations, arresting suspects, seizing servers, and confiscating assets worth around €500,000.
The large-scale anti-piracy action was coordinated by the Criminal Police Inspectorate in Weiden and the Central Office for Cybercrime Bavaria (ZCB), following investigations that began in early 2024.
Five men – three 25-year-old Germans, a 25-year-old Austrian, and a 27-year-old Azerbaijani – are suspected of reselling premium streaming services, including those of a German provider and Netflix, to paying customers through an illicit IPTV platform.
On 3 June 2025, after months of preparation, simultaneous raids were carried out at nine locations: one in the district of Tirschenreuth, two in Munich, one in the district of Pfaffenhofen an der Ilm, and five in Hamburg. More than 100 officers were involved in the coordinated operation, led from Weiden in cooperation with a ZCB prosecutor.
Three suspects were initially remanded in custody. The arrest warrant for a 25-year-old from Munich has since been lifted after initial analysis of seized data failed to confirm strong suspicion, though investigations continue.
Another suspect from Hamburg faces additional charges: preliminary evidence from his seized devices suggests incitement to severe child sexual abuse via a messenger service, as well as involvement in the creation and possession of child abuse material. A 25-year-old software developer from the Tirschenreuth district, believed to be the main perpetrator, remains in custody.
The suspects allegedly operated with advanced IT knowledge and a sophisticated server infrastructure. Securing digital evidence was therefore a priority. The mobile forensic lab “Paladin” from the Upper Franconia Police Headquarters was deployed to ensure rapid on-site data capture.
With assistance from cybercrime specialists in Amberg, Regensburg, Munich, Upper Franconia, the Bavarian State Criminal Police Office and Hamburg’s LKA, investigators seized extensive hardware and storage media. Many encrypted devices were successfully unlocked on site.
Given the suspected financial gains from the illegal streaming scheme, investigators also focused on confiscating assets. Cash, gold coins, and cryptocurrencies valued at approximately €500,000 were secured, with the help of specialists in asset recovery and cryptocurrency tracing.
The operation yielded what investigators called a “major interim success”: an entire server infrastructure, numerous mobile phones, USB sticks, gaming consoles, and large volumes of cloud data were secured. Several servers abroad, allegedly used to operate the illicit IPTV services, were also seized. Processing the terabytes of data is underway and will still take some time.
The suspects face charges of commercial unlawful exploitation of related rights under the German Copyright Act. Customers who subscribed to the illegal IPTV services should also expect criminal proceedings. One suspect faces additional accusations of incitement to severe child sexual abuse, commissioning the production of child abuse material, and possession of such content.
