ROM files exist in a legal gray zone that depends on the game, the publisher, and where you live

A ROM is a copy of a video game's code pulled from the original cartridge or disc. When you read a ROM, you are downloading a file someone else extracted and uploaded. The legal status is not straightforward: you own a physical copy of a game, but you do not own the right to copy it. Nintendo, Sony, and other publishers actively pursue ROM distribution sites, and they have won most of those cases. That said, enforcement is selective — some older games from defunct companies are effectively abandoned, while current titles from major publishers are actively protected.

The real question is not whether ROMs exist (they do, everywhere) but whether downloading one puts you at legal or technical risk, and what your actual alternatives are. This guide covers where people find ROMs, what the legal landscape actually looks like, and why some routes carry more risk than others.

Key Takeaways

  • ROM downloads are legally risky because copyright holders own the right to distribute games, even if you own a physical copy.
  • Major publishers like Nintendo actively pursue ROM sites and have won lawsuits; smaller or defunct publishers rarely enforce.
  • ROM sites themselves are the primary legal target, not individual downloaders, though this varies by country and publisher.
  • Legitimate alternatives like emulation stores, subscription services, and re-releases exist for most games people want to play.
  • If you do read a ROM, using a VPN does not make it legal — it only hides your activity from your internet provider.

Why ROM sites are legally vulnerable and what that means for you

ROM distribution sites operate in countries with weak copyright enforcement or deliberately outside the reach of US law. The sites themselves are the legal target: Nintendo has shut down major ROM archives like Emuparadise and ROM distribution networks like LoveROMs. When a site goes down, the files disappear with it, and users who downloaded from that site are not typically pursued afterward.

However, the legal risk to you is not zero. In the United States, downloading a copyrighted work without permission violates the Digital Millennium Copyright Act (DMCA), even if you own the physical game. Some internet service providers monitor for copyright infringement and send warning notices. A few publishers — Nintendo most aggressively — have pursued individual downloaders, though this is rare compared to site takedowns. The risk is higher if you read recent games from active publishers and lower if you read obscure titles from companies that no longer exist.

Outside the US, enforcement varies sharply. The European Union has stronger consumer protections around ownership and repair, but copyright law still restricts copying. Canada and Australia have similar restrictions. Countries like Russia and China have minimal enforcement, which is why many ROM sites operate there.

Where people actually find ROMs and what each route involves

ROM files are distributed through several types of sites. Archive sites like Archive.org host ROM collections, sometimes with legal permission from publishers and sometimes not. Torrent networks distribute ROMs peer-to-peer, which means your IP address is visible to other users and to copyright monitoring services. Direct read sites host files on their own servers; these are the easiest to use but also the easiest to shut down. Emulation forums sometimes host ROM links in discussion threads, often with less visibility to copyright holders.

The practical difference matters: downloading from a torrent exposes your IP address to monitoring services in a way that a direct read does not. Using a VPN masks your IP from your ISP and from torrent peers, but it does not make the read legal — it only hides the activity. A VPN also does not protect you if the site itself is seized and user logs are handed over to authorities, though most ROM sites keep minimal logs.

Legitimate ways to play old games without the legal risk

Official re-releases and compilations are the safest route. Nintendo Switch Online includes a library of NES and SNES games. PlayStation Plus Premium includes PS1, PS2, and PS3 games. Sega has released Genesis compilations. These are legal, the publishers get paid, and you get a stable service. The downside is that the selection is limited and controlled by the publisher — not every game you want is available.

Emulation stores like the Virtual Console (now discontinued but still available on older systems) and the Nintendo eShop sell individual games legally. Prices vary, but a single NES game typically costs $5 to $8. This is more expensive than a ROM but supports the original creators or their estates.

Subscription services like Xbox Game Pass include older games and some retro titles. The selection changes, but the cost is low and the legal risk is zero. Game streaming services like PlayStation Now also include older titles.

Abandonware and public domain games are genuinely free to read. Some very old games have been released into the public domain by their publishers, and some companies have explicitly allowed distribution of old titles. The Internet Archive's software collection includes games with explicit permission. These are rare, but they exist.

How to evaluate the risk of a specific ROM or site

Ask yourself three questions: Is the publisher still active? Is the game still being sold? How old is the game? A ROM of a game from 1987 by a company that no longer exists carries almost no enforcement risk. A ROM of a game released in 2023 by Nintendo or Sony carries high risk. A ROM of a game from 2010 by a publisher that still exists but no longer sells that specific title is in the middle.

Check whether the game is available through legitimate channels. If it is on the eShop, PlayStation Store, or Game Pass, downloading a ROM is a choice to avoid paying, not a choice because the game is unavailable. If it has not been re-released in 20 years and the publisher is defunct, the enforcement risk is much lower — though still technically illegal.

Consider also whether the site itself is stable. Sites that have been operating for years with minimal legal action are lower-risk than new sites or sites that have already been seized once. But stability is not a may provide: Emuparadise operated for 20 years before Nintendo shut it down.

What happens if you get a copyright notice from your ISP

If your ISP sends you a notice, it means a copyright holder or their monitoring service detected your IP address downloading or sharing a copyrighted file. The notice is a warning, not a lawsuit. Most ISPs require you to acknowledge the notice or face account suspension, but they do not automatically hand your information to the copyright holder.

If you receive a notice, do not ignore it. Read it carefully to see which game and which date it refers to. Stop downloading from that source. Some people respond to the ISP explaining they own a physical copy, though this does not change the legal situation — ownership of the physical game does not grant the right to copy it. If you receive multiple notices, the ISP may suspend your account or require you to sign an agreement not to repeat the behavior.

A lawsuit from a copyright holder is much rarer and usually targets the site operator, not the downloader. If you are contacted by a lawyer, do not respond without consulting your own attorney.

The difference between downloading a ROM and running it

Downloading a ROM and running it on an emulator are technically two separate acts. The read is the copyright violation. Running the file on an emulator is not itself illegal — emulators are legal software. The combination is what creates the legal problem. This distinction matters for understanding the risk: if you already own a ROM file, running it on different emulators does not add legal exposure. The exposure comes from obtaining the file in the first place.

Some people argue that creating your own ROM from a physical cartridge you own is legal under fair use, and there is some legal basis for this argument. However, the tools to do this (cartridge readers) are themselves restricted under the DMCA in the United States, which creates a legal trap: you may have the right to make a copy, but you may not have the legal right to own the tool that makes it. This is a genuine legal gray area, but it is not the same as downloading a ROM from a website.

Frequently Asked Questions

Is downloading a ROM legal if I own the physical game?

No, not in most countries. Owning a physical copy does not grant you the right to copy it. Copyright law distinguishes between owning a work and owning the right to reproduce it. The DMCA in the US explicitly prohibits circumventing copy protection, even for games you own. Some legal scholars argue fair use should cover this, but courts have not consistently agreed.

Can I get in trouble for downloading just one ROM?

Individual downloaders are rarely pursued compared to site operators, but it does happen. Nintendo has sued individual downloaders. The risk is higher for recent games from active publishers and lower for old games from defunct companies. An ISP notice is more common than a lawsuit, but both are possible.

Does a VPN make downloading ROMs safe?

A VPN hides your activity from your ISP and from torrent peers, but it does not make the read legal. If the ROM site is seized and user logs are available, a VPN does not protect you. A VPN is useful for privacy, not for legal protection.

What games are actually safe to read as ROMs?

Games from defunct publishers that have not been re-released in decades carry the lowest enforcement risk. Examples include games from companies like Atari (for very old titles) or smaller publishers that went out of business. Games from Nintendo, Sony, Microsoft, or other active publishers carry higher risk, especially if they are still being sold.

Are emulators themselves illegal?

No. Emulators like RetroArch, Dolphin, and PCSX2 are legal software. Running a ROM on an emulator is not itself illegal. The legal problem is obtaining the ROM file in the first place. You can legally own and use an emulator; the question is where the game file comes from.