Provided are an apparatus and method for forensic marking of digital content. The apparatus includes a forensic marker configured to generate first content by inserting a first binary forensic mark in original content and second content by inserting a second binary forensic mark in the original content, and when a content service request is generated, combine the first content and the second content on the basis of information about a user who has requested the content service and thereby generate third content in which a forensic mark corresponding to the user information is inserted, a content database configured to store the first and second content, and a transceiver configured to transmit the third content.