Section 512(h) of the DMCA gives copyright owners something unusual: a subpoena you can obtain without ever filing a lawsuit. You submit a written request to the clerk of any United States district court, the clerk issues the subpoena, and a service provider that is storing infringing material must hand over enough information to identify whoever put it there. No case number, no judge, no hearing before issuance.
The tool has one large limit. Since the D.C. Circuit's 2003 decision in RIAA v. Verizon, a 512(h) subpoena cannot reach providers that merely transmit data, which rules out the internet access providers behind most torrent and streaming infringement. This article covers the mechanics, the costs, and the situations where ordinary litigation discovery works better.
What a Section 512(h) Subpoena Actually Does
A takedown notice and a subpoena do different jobs. A notice gets material removed or disabled, and tells you nothing about who uploaded it. A 512(h) subpoena does the opposite: it compels the provider to disclose the identity behind the upload, before any lawsuit exists. Practitioners often call it the DMCA subpoena, and it sits between a notice and a judge-signed court order, as easy to trigger as a notice, as forceful as court process.
The statute, 17 U.S.C. § 512(h), sets a short checklist. Your request to the clerk must include a copy of a notification of claimed infringement that complies with § 512(c)(3), the proposed subpoena itself, and a sworn declaration stating that the sole purpose is obtaining the alleged infringer's identity and that the information will be used only to protect rights under the Copyright Act. You pay a processing fee to cover the clerk's costs. If the request is properly assembled, the clerk issues the subpoena, no judge reviews it, and no one on the other side is heard first. The provider must then expeditiously disclose information sufficient to identify the alleged infringer.
The declaration is a real constraint, not a formality. Using the information for some other purpose, harassment, exposure, sale to marketers, is misuse of the process. And because your packet includes a takedown notice, knowing misstatements in it carry the same exposure as a bad-faith notice under § 512(f).
Who the Subpoena Can Reach, and Who It Cannot
The DMCA's safe harbor splits service providers into roles: conduits that transmit material, caches that store temporary copies, hosts that store material at the direction of users, and search or link services that point people to it. A closer look at the safe harbor categories is worth five minutes, because the subpoena's reach tracks them. After RIAA v. Verizon, a 512(h) subpoena reaches providers in the storing and pointing roles. It does not reach conduits.
In practice. That means the tool fits hosts: file lockers, image hosts, forums, marketplace listings, and social services where users upload. A provider storing pirated files in a Discord channel is squarely a host. The company selling the infringer an internet connection is not, and neither is a VPN or a backbone carrier, because those carry data without keeping the infringing material itself.
Your first task is confirming where the material actually lives. A host lookup before anything else tells you whether a proper subpoena target exists, or whether the only entity touching the traffic is a conduit, in which case § 512(h) is off the table entirely.
RIAA v. Verizon: The Conduit Limitation That Redrew the Line
In 2003, the RIAA tried to use § 512(h) against internet access providers to identify file-sharers. The test case concerned a Verizon subscriber sharing music on Kazaa. The RIAA presented its subpoena request to the federal clerk's office in Washington, D.C.; Verizon refused to comply; the district court ordered enforcement; and the D.C. Circuit reversed in Recording Industry Association of America v. Verizon Internet Services (2003).
The reasoning still controls how practitioners use the tool. A 512(h) request must attach a takedown notice, and a takedown notice must identify material to be removed or disabled. That language presupposes a provider with something to remove. A conduit stores nothing; it transmits and forgets. The subpoena power therefore rides along with the takedown power, where one does not reach, neither does the other. The court also noted that reading the statute to allow clerk-issued subpoenas against conduits would raise serious questions, including under the First Amendment, which it declined to invite. The Eighth Circuit reached the same result against Charter Communications the following year.
The aftermath reshaped enforcement. The RIAA abandoned the 512(h) route and began suing unnamed Doe defendants, then unmasking them through ordinary Rule 45 discovery, a shift visible in any history of the RIAA's piracy lawsuits. For you, the takeaway is simple: if the material passes through a provider but is not stored there, § 512(h) will not produce the identity. A lawsuit will.
How to Request a 512(h) Subpoena, Step by Step
- Confirm the provider stores the material, and find its registered DMCA agent, the Copyright Office's agent directory lists them.
- Send a fully compliant takedown notice, or at minimum have one ready, because your request must attach one. The requirements are strict; walk through how to file a DMCA takedown notice before drafting. The notice itself can go out for free.
- Draft the proposed subpoena. It directs the provider to disclose information sufficient to identify the alleged infringer: name, address, email address, and the account data the provider holds.
- Draft the sworn declaration. Purpose: obtaining the alleged infringer's identity. Use: protecting rights under the Copyright Act only. It is signed under penalty of perjury.
- File the packet with the clerk of a U.S. district court, in practice, one where the provider is subject to jurisdiction, and pay the fee.
- Serve the subpoena on the provider's registered agent. The provider must expeditiously disclose, and some will bill their compliance costs.
Expect the calendar to run longer than a plain takedown. A standard notice often produces removal in days, and the typical DMCA takedown timeline spans a day to a few weeks; the subpoena track adds drafting, service, and a response window on top.
Disclosure, Privacy Policies, and Motions to Quash
The statutory yardstick is information sufficient to identify the alleged infringer. In practice that means whatever the provider's records tie to the account: name, address, email, sometimes payment or account identifiers. It is not a license to demand a full forensic history of the account.
Providers rarely hide behind privacy policies. The disclosure duty is statutory, so a policy promising never to share user data is not a defense. Resistance takes other forms: an argument that the notice or declaration is defective, or a motion to quash filed by the provider or by the subscriber once they learn of the subpoena. Issuance is ex parte, the subscriber is not heard before the clerk signs: so the fight, when there is one, happens after service.
Anonymous speech does get First Amendment weight in court, and judges apply differing tests for unmasking. But the subscriber needs a concrete argument to win: a defect in the notice, in the declaration, or in the subpoena's scope. Providers respond differently to quash motions too, some hold disclosure while one is pending, others comply on the subpoena's terms.
What a 512(h) Subpoena Costs in Practice
The out-of-pocket filing cost is the least of it. The clerk's processing fee is modest by litigation standards; the real budget item is professional time. The notice, the declaration, and the proposed subpoena all have to be right, because the clerk issues on the strength of your paper and a defect usually surfaces only after the provider refuses to comply. Uncontested, drafting and filing commonly runs from several hundred dollars to a few thousand in attorney time. A contested motion to quash multiplies that, because you are now briefing a motion in federal court. Some providers also bill their compliance costs.
Compare that with the baseline. Ordinary takedown work has its own cost structure, and a DIY approach costs nothing but your time. But subpoenas are where self-help genuinely stops working for most people, one of the clearer signals of when to hire a copyright lawyer.
Alternatives, and When Ordinary Litigation Discovery Works Better
Before you subpoena anyone, check whether the system hands you the identity for free. If your takedown notice drew a counter-notice, that filing must itself contain the subscriber's name, address, and telephone number, and the provider forwards it to you. Read up on DMCA counter-notices and what happens after one arrives before paying for court process. The tradeoff is the clock: if you do not file a court action within roughly ten to fourteen business days, the material typically goes back up.
Some platforms also disclose voluntarily once you show a solid claim. That is platform policy rather than law, so results vary, but an escalation ladder from notice to formal demand catches those cases cheaply. A cease-and-desist letter and a DMCA notice apply different pressure, and the letter sometimes coaxes cooperation where the notice alone cannot.
Litigation discovery beats the 512(h) subpoena in four recurring situations. First, conduits: where the target provider does not store the material, torrent cases above all, the only route left after Verizon is a Doe lawsuit followed by Rule 45 discovery, with courts applying varying standards for when unmasking is justified. Second, when you need more than a name: full discovery reaches communications, logs, and revenue figures that identity alone never will. Third, when you intend to sue anyway, since filing first makes identification part of an ordinary case with a judge and contempt power attached. Fourth, non-U.S. providers: a federal clerk's subpoena does not bind offshore hosts, where foreign law and platform policy drive the outcome, see how DMCA enforcement works internationally.
Two adjacent points complete the map. The Copyright Claims Board is built for disputes between the parties in front of it; unmasking a third-party account holder is not what its small-claims process does. And if you want blocking rather than identification, that is § 512(j) injunctive relief, a different proceeding entirely, covered under site-blocking orders.
The calculation can also be business-driven. Game developers chasing a leaked pre-release build often need the uploader's identity fast and once, which makes the 512(h) subpoena proportionate; an author with one pirated chapter may get further with a notice and a counter-notice's free disclosure.
Frequently Asked Questions
Do I need to file a lawsuit before getting a § 512(h) subpoena?
No. The clerk issues it before any case exists, that is the tool's whole point. Your sworn declaration commits you to using the identity information only to protect your copyright, so if you already know you will need broader remedies, filing suit first and using ordinary Rule 45 discovery will get you more than the subpoena would.
Can I use a § 512(h) subpoena against someone's internet provider?
Usually not. After RIAA v. Verizon, the subpoena reaches only providers that store the infringing material. A standard access provider transmits data without storing it, so § 512(h) does not apply, and these providers refuse such subpoenas on exactly that basis. Identifying a subscriber behind torrent traffic or a VPN connection takes a Doe lawsuit and ordinary discovery instead.
What information must the provider disclose?
The statute requires information sufficient to identify the alleged infringer, in practice, whatever the provider's records connect to the account: name, address, email address, sometimes payment or account identifiers. It does not automatically open download histories or internal logs. For records beyond the account itself, ordinary discovery inside a filed lawsuit is the vehicle.
Can the subscriber stop the disclosure?
Yes, but only after learning of the subpoena. Issuance is ex parte, so the subscriber typically finds out from the provider's notice or the subpoena itself. They can intervene and move to quash, pointing to defects in the notice, the declaration, or the subpoena's scope, and raising First Amendment concerns about anonymous speech. Judges weigh these challenges under differing tests.
How long does the § 512(h) process take?
The clerk issues quickly once a proper request arrives. The real calendar is service plus the provider's response window: uncontested, plan on several weeks from filing to identification in hand. Providers that pause for a quash motion stretch the schedule by the briefing cycle, and contested fights can run for months.
Your Next Steps
- Preserve the record now: URLs, screenshots, dates, and copies of the infringing material, kept somewhere with reliable timestamps.
- Run a host lookup and confirm the provider that actually stores the files, not the registrar, not the access provider, and usually not the CDN in front of the site.
- Send a compliant takedown notice immediately. You must attach one to the subpoena request anyway, and it sometimes resolves the problem without court paper.
- If a counter-notice arrives, harvest the identity it contains and calendar the ten-to-fourteen-business-day window before the material goes back up.
- Match the tool to the data holder: stored by a host, § 512(h); carried by a conduit, a Doe suit; offshore platform, foreign-law and policy channels.
- If drafting the declaration, the subpoena, and any enforcement is more than you want to carry, professional services run this end to end, our pricing is a short page.