DMCA-ignored hosting explained: what it means in 2026

DMCA-ignored hosting means a host outside the United States does not act on takedown notices sent under the US Digital Millennium Copyright Act, because that law has no legal force where its servers run. It does not mean copyright law stops applying. Local copyright law, local courts and, in EU countries, the Digital Services Act still decide what happens to content on the server.

That distinction is the whole story. Hosts that blur it sell a promise nobody can keep. This guide explains what the DMCA is, why its notices stop at the US border, which channels can still reach an offshore server in 2026, and how to tell a principled host from a risky one.

What the DMCA is

The Digital Millennium Copyright Act was signed into law on 28 October 1998. The part that matters for hosting is Section 512 of the US Copyright Act. It creates four "safe harbors" for online service providers: conduits, caching services, hosting services and search tools. A provider that qualifies is shielded from monetary liability for its users' infringements, in exchange for cooperating with copyright owners.

That cooperation is the familiar notice-and-takedown process:

1. A rights holder sends a notice that identifies the work, the allegedly infringing material and its location, with a statement made under penalty of perjury.
2. The provider removes or disables access to the material "expeditiously" and tells the user.
3. The user can send a counter-notice. Unless the rights holder files suit, access is restored within 10 to 14 business days.
4. To keep the safe harbor, the provider must also have a policy that terminates repeat infringers.

Note the structure. The DMCA does not order anyone to remove anything. It offers US providers a deal: follow the procedure and you are protected from damages under US law. A host with no exposure to US law has no reason to accept that deal.

Why a DMCA notice has no force abroad

Copyright law is territorial. US courts have long held that the US Copyright Act does not reach infringing acts that take place entirely outside the United States; the Ninth Circuit restated the rule in Subafilms v. MGM-Pathe (1994). A server in Reykjavík, Zürich or Chișinău is governed by Icelandic, Swiss or Moldovan law. A notice that cites 17 U.S.C. § 512 is, legally, a letter.

That does not create a copyright-free zone. The Berne Convention has 182 contracting parties, including Iceland, Switzerland, Moldova, Romania, the Netherlands, Bulgaria and Malaysia. Each one protects foreign works under its own law. A rights holder whose US notice goes nowhere can use the local procedure instead.

What "ignored" means in practice

At a principled offshore host, "DMCA ignored" should mean something specific and fairly boring:

• The notice is received, logged and read. It is not thrown away, because it may also describe something else, such as malware or phishing.
• The host checks whether the complaint describes something illegal under the law of the country where the server runs.
• If it is only a US copyright claim, the host replies that US law does not apply there, and nothing happens to the server.
• If the content is illegal everywhere, such as child sexual abuse material, phishing or malware, the format of the notice is irrelevant: the host acts.

The table below shows how different requests are usually treated. Exact rules depend on the host and the country, which is why the written policy matters more than the slogan.

What can still reach an offshore server

A US notice is only one route. Rights holders and their enforcement vendors know the others well.

Local copyright law and local courts

Every country a serious offshore host uses has copyright law and courts that enforce it. Some examples:

• Iceland. Known for press-freedom initiatives, yet in October 2014 the Reykjavík District Court ordered two ISPs to block The Pirate Bay and Deildu.net in a case brought by the Icelandic performing rights society STEF.
• Switzerland. The 2020 copyright revision introduced a "stay-down" duty (Article 39d) for hosting providers that create a particular risk of infringement, for example through a technical setup or business model that favors it.
• Malaysia. Section 43H of the Copyright Act 1987 sets up a local notice-and-takedown procedure with a 48-hour removal window for providers that want its protection. Section 43I makes a knowingly false notice a criminal offense, punishable by a fine of up to RM 100,000, up to five years in prison, or both.
• Moldova. Outside the EU, but content is assessed under Moldovan law, and Moldovan courts and prosecutors can issue orders.

The EU Digital Services Act

Inside the EU, "DMCA ignored" has a hard limit. The Digital Services Act has applied to all intermediary services since 17 February 2024. Article 16 requires hosting providers to run a notice-and-action mechanism. A notice that explains why the content is illegal, gives its exact URL, identifies the sender and confirms good faith can give the host "actual knowledge" of illegal content. A host that then fails to act loses its liability exemption under Article 6. National authorities can also issue orders to act against illegal content under Article 9.

Copyright infringement is illegal content under EU and national law. So a rights holder who writes a DSA-compliant notice to a host in Romania, the Netherlands or Bulgaria must be taken seriously, even if the host advertises itself as DMCA-ignored.

Iceland is in the European Economic Area but not the EU. As of September 2026 the DSA is still under scrutiny for incorporation into the EEA Agreement, with no Joint Committee decision in force. Switzerland, Moldova and Malaysia are outside the DSA altogether.

Upstream networks and IP address holders

Complaints are often sent to whoever is listed as the abuse contact for an IP range, not to the host's website. In Europe, the RIPE Database requires an abuse contact for network resources. If a host rents its IP space or connectivity from a provider that processes DMCA notices, that provider can pressure the host, null-route an address or end the contract. A "DMCA ignored" promise is only as strong as the host's control over its own network.

Domain registrars and registries

Your domain name is a separate target. ICANN-accredited registrars must take "reasonable and prompt steps" to investigate and respond to abuse reports under section 3.18 of their accreditation agreement. Registries can be reached too: in 2012, US authorities took over bodog.com through Verisign, the US operator of the .com registry, although the domain was registered through a Canadian registrar. A .com name carries US exposure wherever the server sits. Our offshore WordPress hosting guide covers choosing the registrar and the domain.

CDNs and search engines

If you put a US content delivery network in front of an offshore server, you bring US procedures back in. Cloudflare, for example, forwards copyright complaints to website operators and hosting providers and gives rights holders the hosting provider's contact information. It also runs a trusted reporter program through which some rights-holder organizations can obtain origin IP addresses.

Search engines act independently of hosts. Under the DMCA, a rights holder can ask Google to remove a page from its search results, and Google may delist it without any action by the host.

Payment providers

If your project takes money through mainstream processors, their rules apply on top of any law. PayPal's Acceptable Use Policy bans items that infringe copyright "under the laws of any jurisdiction". A rights holder who cannot move a host can still try to cut off the revenue.

How to evaluate a host's "DMCA ignored" claim

Marketing pages are easy to write. These checks take a few minutes and tell you more:

1. Where do the servers physically run? A company registered in Panama or Seychelles says nothing about the data center. Ask for the country, then check the IP range's registration and run a traceroute.
2. Who holds the IP space and the upstream? Look up the abuse contact for the IP range. If it belongs to a large provider with its own DMCA process, complaints can bypass the host.
3. Is there a written policy for local orders? A credible host explains what happens with a court order from its own jurisdiction and, in EU locations, with DSA notices. "We ignore everything" is not a policy.
4. Does it say what it never tolerates? Look for explicit zero tolerance for child sexual abuse material, malware, phishing, spam and fraud.
5. Is there any verifiable transparency? A transparency report, a signed warrant canary and a working abuse contact are good signs.
6. Do you know who you are contracting with? The host should name its operating entity, at least on request.

Red flags

• "Bulletproof" language. It usually means the operator tolerates abuse, and governments now sanction such hosts: the US Treasury designated Aeza Group in July 2025 for serving ransomware and infostealer operators. Our comparison of offshore and bulletproof hosting covers the difference in detail.
• "Anything goes" or "all content allowed". No lawful host can promise this. The list of what is illegal everywhere is not short.
• Spam, phishing or scanning welcomed. These ruin the IP reputation of every customer on the same network.
• Vague geography. "Offshore servers in Panama" with no data-center country, or IP addresses that geolocate somewhere else entirely.
• Prices below hardware cost. Someone is paying the difference, and it is rarely a well-run business.
• Claims of immunity. "Untouchable" or "no laws apply" is false everywhere. Local courts can always act.

How OffshoreServ handles notices

We say "US DMCA notices are not actioned" because it is precise, and it is what our DMCA-ignored hosting is built on. Our DMCA policy sets out the process, which is the same in all seven of our jurisdictions:

1. Every complaint is logged and checked against the law of the country where the server runs.
2. Foreign notices, including US DMCA notices, are answered, not enforced. Nothing happens to the server, as what happens to a DMCA notice at an offshore host explains step by step.
3. A valid court order from the server's jurisdiction or, in our EU locations, a notice that meets the DSA's requirements can require action. The customer is informed and can respond first, unless a court forbids it.
4. Requests and outcomes are published in our quarterly transparency report, without customer data. The first report covers Q3 2026.

Some things skip that process entirely. Our acceptable use policy has zero tolerance for child sexual abuse material (reported to the competent authorities), malware and botnet infrastructure, spam and phishing, attacks from our network and fraud against real people. We also publish a PGP-signed warrant canary, renewed every quarter. Offshore hosting is about choosing which law applies, not about escaping all of it.

Which countries ignore DMCA notices?

Every country outside the United States, in the narrow sense that the DMCA is US law and has no force there. The useful question is what each country uses instead: its own copyright law, its courts and, inside the EU, the Digital Services Act. We go through that country by country in DMCA-ignored countries, including why the Netherlands is not quite what the lists say.

Choosing where your server runs

If your concern is US takedown notices, any of our seven locations puts your server outside US jurisdiction. If you also want to stay outside the DSA's notice-and-action rules, choose Switzerland, Moldova or Malaysia, or Iceland for as long as the DSA remains outside the EEA Agreement, rather than an EU member state. Our jurisdiction comparison covers the trade-offs, and the locations page shows which products run where. An offshore VPS starts at $2.39 a month and is available in all seven countries.