A system, comprising: a server that hosts user-uploaded media content that is formatted as a live video stream uploaded by a broadcasting user and received by at least one recipient user, the server including a microprocessor that executes the following computer executable components stored in a memory: a monitor component that constructs respective fingerprints of a plurality of segments of the media content that is broadcasted as the live stream and constructs respective patterns of the fingerprints, wherein the patterns are hashes or other representations of the fingerprints; a sampling component that identifies candidate patterns in a violation index that match the patterns and that identifies candidate fingerprints in a fingerprint repository that are related to the identified candidate patterns, wherein the candidate patterns are hashes or other representations of the candidate fingerprints, the plurality of candidate fingerprints representing segments of another media content; a matching component that compares the fingerprints of the plurality of segments of the media content that is broadcasted as the live stream with the identified candidate fingerprints to determine whether a sufficient match between the fingerprints and the identified candidate fingerprints is present, wherein the sufficient match between the fingerprints and the identified candidate fingerprints is present if a number of segments for which a match between the fingerprint for the segment and the identified candidate fingerprint meets or exceeds a match strength threshold, meets or exceeds a segment threshold; and an enforcement component that, in response to a determination that the sufficient match between the fingerprints and the identified candidate fingerprints is present, instruct a stream controller to provide a modification to a presentation of the media content. a monitor component that constructs respective fingerprints of a plurality of segments of the media content that is broadcasted as the live stream and constructs respective patterns of the fingerprints, wherein the patterns are hashes or other representations of the fingerprints; a sampling component that identifies candidate patterns in a violation index that match the patterns and that identifies candidate fingerprints in a fingerprint repository that are related to the identified candidate patterns, wherein the candidate patterns are hashes or other representations of the candidate fingerprints, the plurality of candidate fingerprints representing segments of another media content; a matching component that compares the fingerprints of the plurality of segments of the media content that is broadcasted as the live stream with the identified candidate fingerprints to determine whether a sufficient match between the fingerprints and the identified candidate fingerprints is present, wherein the sufficient match between the fingerprints and the identified candidate fingerprints is present if a number of segments for which a match between the fingerprint for the segment and the identified candidate fingerprint meets or exceeds a match strength threshold, meets or exceeds a segment threshold; and an enforcement component that, in response to a determination that the sufficient match between the fingerprints and the identified candidate fingerprints is present, instruct a stream controller to provide a modification to a presentation of the media content.