Pornography is Never Free: The Strike 3 Shakedown

There is a special kind of audacity in building a business model on legal extortion, running it for eight years against people too frightened to fight back, and then turning that same weapon on Meta.  Strike 3 Holdings — the Miami-based company behind the Vixen, Blacked, and Tushy pornography brands — has filed a US$100 billion copyright lawsuit against Meta Platforms.  The allegation is that Meta used corporate IP addresses to torrent nearly 2,400 of Strike 3’s films to train its AI systems.  US District Judge Eumi K. Lee denied Meta’s motion to dismiss on 11^th June 2026, finding the claims plausible enough for discovery.  That ruling is the most dangerous thing that has ever happened to Strike 3.

The Business Model

Strike 3 has filed over 20,000 federal copyright lawsuits in the United States since 2017.  In 2025 alone, it filed 4,088 cases — a new record.  Almost every single one targets a private individual identified only by an IP address.  The mechanics are straightforward.  Strike 3’s proprietary system, called VXN Scan, monitors BitTorrent swarms and records IP addresses that participate in the distribution of its films.  Strike 3 files a John Doe lawsuit, obtains a court order compelling the defendant’s internet service provider to disclose the subscriber’s identity, and sends a demand letter.  Settlement typically runs to several thousand dollars, with five-figure demands in some cases.  Legal experts estimate Strike 3 extracts between US$20 million and US$30 million annually through this process.  None of the cases has gone to trial.  That is not a litigation strategy.  That is a revenue model dressed in legal process.

Predatory by Design

US District Judge Royce Carlton Lamberth was not subtle about what he thought of it.  In Strike 3 Holdings, LLC v. Doe (D.D.C., November 2018), he described Strike 3 as treating the federal courts “not as a citadel of justice, but as an ATM.”  He called the lawsuits “smacking of extortion” and a “high-tech shakedown.”  He observed that linking an IP address to an infringer was “famously flawed” — because VPNs, spoofed addresses, open Wi-Fi networks, shared household routers, and malware can all generate false positives.  He also noted Strike 3’s habit of abandoning cases “at the first sign of resistance, preying on low-hanging fruit.”

Magistrate Judge James Orenstein went further.  In 2019, he denied Strike 3’s motions for expedited discovery in thirteen cases simultaneously.  Of 143 resolved Strike 3 cases in his district, 49 had settled, and 94 had been voluntarily dismissed.  Of those 94 dismissals, 50 were cases where Strike 3 was not confident the defendant was even the actual infringer.  The judge called that proportion “alarmingly high.”  That is Strike 3 acknowledging, in their own case management decisions, that one in three targets may have been innocent.

The model works because of the content involved.  Being named as a defendant in a pornography copyright case carries reputational consequences that dwarf the settlement demand.  Strike 3 does not need to win.  It needs the defendant to calculate that it is cheaper and less embarrassing to pay than to contest.  That calculation works almost every time — not because the defendant is guilty, but because the cost of innocence is too high.  This is not IP enforcement.  This is weaponised shame.

The Meta Problem

Strike 3 has now collided with a defendant that does not embarrass easily and has US$1.4 trillion in market capitalisation to spend on lawyers.  Meta’s defence team called 157 confirmed downloads across 47 IP addresses over seven years “meagre, uncoordinated activity” by individuals for “personal use.”  Judge Lee rejected that framing and sent the case to discovery.  Discovery is where Strike 3’s model faces structural collapse.

Meta’s lawyers will do what 20,000 terrified private individuals could not afford to do: they will demand VXN Scan’s technical documentation.  They will challenge its methodology under the Federal Rules of Evidence.  They will depose its engineers.  They will contest every assumption Strike 3 has used unexamined for eight years.  VXN Scan has never been independently audited.  Its source code has never been released.  Its methodology has never been tested in an adversarial proceeding — because every adversarial proceeding was settled before it got that far.  Strike 3’s evidentiary framework is a black box that has never seen the light of a contested courtroom.  It is about to.  This is going to be entertaining.

The Prenda Law Ghost

Strike 3 says VXN Scan cannot upload to BitTorrent swarms — that it is “incapable of doing so.”  This disclaimer exists for a reason.  In 2013, it emerged that Prenda Law — the firm that pioneered mass copyright litigation in the adult film space before Strike 3 — had uploaded the very films it later sued over to The Pirate Bay under the pseudonym “Sharkmp4”, seeded them into torrent swarms, and then sued the people who downloaded them.  When a defence subpoena traced the uploading IP addresses, they resolved to a company controlled by Prenda’s own lead attorney, John Lawrence Steele.  Prenda was fined.  Its principals were referred for criminal investigation.  Several were indicted on fraud and extortion charges.

Meta’s discovery team will want to verify Strike 3’s “incapable of uploading” claim with logs, architecture documentation, and sworn testimony.  If any ambiguity emerges, Strike 3 will have a Prenda problem — except this time in front of a judge who has every resource to pursue it.

Can Defendants Sue Back?

If Meta defeats this lawsuit by demonstrating that VXN Scan’s methodology is unreliable, does that open a class action by prior defendants who settled under duress?  Possibly.  A successful challenge to the underlying evidence — demonstrating that Strike 3 knew or should have known its IP identification was unreliable — could support claims for abuse of process, malicious prosecution, or civil RICO violations.  Civil RICO requires a pattern of racketeering activity.  Filing 20,000 lawsuits based on methodology a federal judge called “famously flawed”, while extracting US$20 to US$30 million per year in settlements, is, at minimum, an interesting pattern.

The class action hurdle is significant.  Settlements are confidential.  Defendants signed non-disclosure agreements.  But if discovery in the Meta case produces internal Strike 3 documentation acknowledging that VXN Scan generates false positives at a known rate, the class action theory becomes stronger.  Magistrate Judge Orenstein’s 2019 finding is critical.  He established, based on Strike 3’s own statistics, that a material proportion of its targets were likely innocent.  The plaintiff's bar will not need much more than that.

The US Legal Framework: Why This is Possible

Frankly, this is possible because the US legal framework is shit.  The United States Digital Millennium Copyright Act and Title 17 of the U.S. Code provide statutory damages of US$750 to US$30,000 per infringed work, rising to US$150,000 for willful infringement.  Strike 3 does not need to prove actual damages.  It invokes the statutory range.  Federal Rules of Civil Procedure Rule 26 permits expedited discovery when a party’s identity is unknown — allowing a copyright holder to subpoena an ISP before the defendant is even served.  The defendant has no advance notice.  By the time they learn they have been identified, Strike 3 already has their name, address, and account history.

Statutory damages, expedited discovery, and anonymous filing together create a machinery that is lawful and designed for extraction.  Congress built it to protect copyright holders from anonymous infringers.  Strike 3 industrialised it.  There is no regulatory limit on the volume of filings.  There is no requirement that a plaintiff demonstrate a probability of success before obtaining discovery.  There is no rule capping the number of John Doe suits any single entity may file.  The federal courts function, as Judge Lamberth noted, as an ATM — except the cash comes from individuals who have not been proven to have done anything wrong.

The Singapore Comparison

Singapore’s approach demonstrates that a legal system can make deliberate choices about who gets access to this machinery.  The precedent is the Odex affair of 2007.  Odex, a Singapore-based anime licensor acting for Japanese studios, attempted to replicate the US model.  It hired BayTSP to monitor BitTorrent swarms, recorded IP addresses, and sought court orders compelling SingNet, StarHub, and Pacific Internet to disclose subscriber identities.  Demand letters followed, seeking S$3,000 to S$5,000 per subscriber.  The courts stopped it.

District Judge Earnest Lau Ching Teck ruled in August 2007 that Pacific Internet need not disclose.  Odex was a licensee, not the rights holder.  Only the rights holder or an exclusive licensee with standing could compel disclosure.  The High Court upheld the ruling in January 2008, confined the subscriber data to the six Japanese studios directly, denied Odex access, and awarded S$20,000 in costs against Odex.  Singapore requires a party seeking subscriber disclosure to demonstrate standing at the threshold.  The court scrutinises who is asking, why, and whether they have the legal right to ask.  The US model has no equivalent gate.  A copyright holder files a complaint and obtains discovery as a matter of course.

Singapore’s Copyright Act 2021 further tightened the framework, strengthening the site-blocking regime and clarifying network service provider obligations.  The emphasis is on proportionate enforcement, not mass litigation.  A Singapore court would be considerably less hospitable to a plaintiff filing 4,000 suits per year against anonymous IP addresses.  The lesson is not that Singapore is a litigation-free paradise.  The lesson is that procedural architecture shapes behaviour.  When courts impose threshold requirements on discovery, the industrial-scale copyright troll model becomes uneconomical.  When courts do not, it flourishes.

The Weaponisation Risk

Strike 3’s model demonstrates that a private commercial entity can compile surveillance-grade data on individuals’ internet behaviour, attach that data to legal process, use civil subpoenas to pierce ISP anonymity, and extract money — all without law enforcement oversight, judicial warrant at the collection stage, or public accountability for the underlying technology.  The threat does not require a pornography company.  It requires a copyright portfolio, a passive monitoring tool on peer-to-peer networks, and access to a jurisdiction that permits expedited pre-trial discovery.  All three are obtainable.

An IP address can be generated by a shared router, a corporate network, a VPN exit node, or malware on a compromised device.  A false positive is not theoretical.  On Strike 3’s own figures, it is material.  Magistrate Judge Orenstein found that roughly one in three Strike 3 targets may have been the wrong person.  For a private individual, a wrongful demand letter is an indignity.  For a senior executive, a political figure, a military officer, or a diplomat, it is a vulnerability.  The reputational architecture of the attack does not require guilt.  It requires association.  Being named in a pornography copyright lawsuit — even a wrongful one, even one later dismissed — generates a public record that a hostile actor can exploit indefinitely.  A sophisticated adversary running this playbook against Persons of Influence does not need to win in court.  The filing is the weapon.

The Strategic Outlook

Strike 3 is trapped between two bad outcomes.  If it wins against Meta, it validates VXN Scan — but only after Meta’s lawyers have spent months dismantling it in discovery and publishing every weakness in the public record.  Every future defendant will have access to that playbook.  Settlement rates will fall.  The revenue model degrades.  If it loses against Meta — if the court finds VXN Scan's methodology cannot establish corporate liability — a cascade follows.  Prior defendants have grounds to challenge their settlements.  The class action bar arrives.  Congressional scrutiny, largely absent from this area, materialises.

Strike 3 built a business on the assumption that its targets could not fight back.  It selected 20,000 defendants because they lacked the resources, the legal sophistication, or the reputational resilience to contest.  It has now selected a defendant with unlimited resources, enormous reputational resilience, and a direct commercial interest in exposing everything Strike 3 would prefer to keep quiet.  The ATM, it turns out, had security cameras the whole time.

---

Terence Nunis | Executive Chairman, Equinox Zenith | Author, The 1% Playbook: The Billionaire Cheat Code