A new track appears on your favorite artist’s Spotify page, and you hit play. It sounds a bit off. The vocals feel flat, the lyrics are odd, and the cover art looks strange. These are all signs that you may have run into a streaming impersonation scam, where criminals upload AI-generated songs to a real artist’s profile.
In this article we will explain how the fake releases get there, why scammers bother, and what to do if you spot one. Knowing the signs protects your playlists and the musicians you love.
Key takeaways
- Scammers use AI to create songs and exploit distribution loopholes to publish them under real artists’ names.
- The goal is to grab “free” royalty money, while the artist’s reputation takes the damage.
- Small and inactive artist profiles are the easiest targets.
- Report suspicious tracks to the streaming platform and tell the artist.
How does the streaming impersonation scam work?
The fraud begins with scammers using an AI tool to generate a song and artwork, before uploading both through a digital distribution service. The scammer simply pretends to be the artist when they upload, and the automated platform distributes their track to popular streaming services like Apple Music and Spotify. The song appears on the real artist’s profile across several platforms.
A team of researchers at 404 Media tested the method with a real band and reported that it took about five minutes to upload and distribute a fake track. The fake track reached services including Spotify, Tidal, Apple Music, and Amazon Music.
The test shows that distributors mostly rely on the uploader’s word, and the platforms often do not detect fraudulent activity.
Why does it work so well?
The simple answer is that generative AI changed the scale. In the past, one person can once have faked and uploaded a single song – a process that may have taken several hours.
Now the same person can produce and upload hundreds of fake tracks in a day. By attributing songs to major stars, minor celebrities, and even deceased jazz musicians, the scammers increase the chances of people listening to them.
Why are criminals faking artist releases?
As with almost all cybercrime, the motive is money. Royalties (license fees paid from the streaming service to the artist) go to the person who uploaded it, in this case the scammer. No royalty for these falsely attributed songs is paid to the real artist whose name is being used. A track attached to a well-known name and a busy profile page draws far more plays than an anonymous AI filler would.
Some artists are easier prey than others. Famous acts attached to major studio labels often have teams who watch their pages. Smaller bands rarely do, and Spotify has confirmed that profiles that are not actively managed can be especially vulnerable to impersonation. Dead artists are targeted too, because nobody is around to object.
The scam affects listeners too. Fake tracks can pad your listening history and skew algorithmic recommendations. Scam links hidden in track descriptions or linked pages are a further risk, potentially opening you to malware infection of fraud.
How can you spot a fake track?
A fake release often looks slightly wrong. Check a few details before you press play, or at least before you add the track to a playlist. It is extremely unlikely that your favorite artist will release a new track without making some kind of official announcement on their website or socials.
Warning signs to look for
These flags will help you better spot a potentially fraudulent song:
- The release has no announcement on the artist’s official website or social accounts.
- The song’s style is far from the artist’s usual sound, or the vocals sound synthetic.
- The artwork looks generic or AI-generated, and the credits are missing or odd.
- The release uses an unfamiliar label or songwriter name, or it lacks a verification badge where the platform offers one.
What should you do if you find a fake track?
The good news is that you are not at risk just by seeing the track online. However, it is best not to engage with it further. Instead, you should:
- Do not share or save the track.
- Use the platform’s report option, usually found in the menu next to the song.
- Tell the artist or their team through their official channels. Small acts may not know they are being impersonated.
- Remove any playlist entries and clear it from your recommendations if you can.
- Do not click any links attached to the release.
Platforms say they are responding. Spotify says protecting artists’ identities is a top priority and it is working with distributors to stop bad submissions at the source. It is also testing a tool that lets artists approve releases before they appear on their profile, although that is still in limited beta. Your reports help those systems learn, becoming more effective in the process.
Staying alert as a music fan
Streaming fraud shows how quickly criminals adopt new tools. A little skepticism goes a long way. If a release feels strange, check it, report it, and let the artist know.