Spanish law enforcement has dismantled Cristal Azul, a popular Kodi add-on accused of enabling illegal football streaming to 78,000 users. The operation, which broadcasters claim cost them €42 million in losses, underscores the mounting pressure on piracy networks. Adding to the tension, Telegram has updated its policies to cooperate more closely with legal authorities, triggering concern and retreats among piracy communities.

Operation Blue Corsair: The Hunt for Illegal Streams

In a move aimed at disrupting piracy in Spain, the Guardia Civil led Operation Blue Corsair (Operación Corsario Azul), targeting Cristal Azul, a well-known Kodi extension for unauthorized sports streams. Investigators traced illegal football broadcasts to a source on a prominent instant messaging platform, later revealed to be Telegram.

By analyzing the source code of the add-on, authorities identified a 37-year-old man as the developer behind Cristal Azul. He now faces charges of fraud and intellectual property infringement, with the damages calculated at €42,547,104. Alongside this, the operation resulted in the deactivation of associated Telegram channels and the removal of the add-on’s code, effectively dismantling its operations.

LaLiga and Movistar Lead the Charge

The operation stemmed from complaints by Spain’s LaLiga football league and telecom provider Movistar, both vocal critics of the impact piracy has on sports and broadcasting revenue. Together, they accused Cristal Azul of undermining their business through unauthorized live streams.

Though Spain’s Ministry of the Interior kept details sparse in its announcement, visuals from the operation revealed Cristal Azul’s involvement. Before its shutdown, the add-on was distributed through platforms like GitHub, though its developers abruptly ceased operations in early October 2024, citing increasing legal risks.

A Ripple Effect in the Piracy World

Cristal Azul’s shutdown has had a cascading effect across the piracy landscape. The Luar repository, which hosted the add-on, also shuttered soon after, leaving a farewell message reading “See you soon.” Other platforms, including TVChopo and Kodivertido, scaled back their activities around the same time, and the popular Kodi add-on Palantir took steps to enhance its security.

These closures reflect growing anxiety among piracy groups, many of whom relied on Telegram as a key tool for distributing content and communicating with users.

Telegram’s Privacy Policy Shift: A Warning for Pirates

Once considered a safe haven for piracy networks, Telegram is now signalling a change in direction. Following the August 2024 arrest of its CEO, Pavel Durov, in France, the company pledged to address illegal activities more proactively.

In a statement to Spanish media, Telegram clarified its new approach: IP addresses and phone numbers of users involved in rule violations may now be handed over to authorities in response to legal requests. This global policy update marks a significant shift from Telegram’s prior emphasis on privacy and is causing panic among piracy communities.

Piracy Networks Face New Challenges

Telegram’s updated policies and the high-profile shutdown of Cristal Azul have sent shockwaves through the piracy ecosystem. As the risk of exposure grows, some piracy groups are closing down, while others may turn to alternative platforms or adopt more clandestine operations.

For rightsholders like LaLiga and Movistar, these developments represent a significant win, though the fight against piracy is far from over. The closure of Cristal Azul and the retreat of related platforms are only the latest moves in an ongoing battle, as piracy groups continually adapt to enforcement efforts.

Telegram’s shift serves as a wake-up call for pirates: anonymity is no longer guaranteed, and the consequences of illicit activities are becoming harder to avoid. With authorities and platforms working more closely together, the landscape of online piracy may be poised for a dramatic transformation.