A method and system for improving a digital media content transfer blocking process is provided. The method includes detecting a request for access to digital media content from a digital media provider system. Network traffic across the network is identified and it is verified that the digital media content is comprised by the network traffic. In response, investigation platform software code is executed and a database system associated with the digital media provider system is queried. A system determines if a legitimate connection based relationship exists between a user device and the digital media provider system and the digital media content is monitored. The digital media content is determined to be unauthorized for use by the user and in response the digital media content is disabled from executing functions with respect to the user device of a user.