Scammers slip AI tracks onto real artists’ Spotify and streaming profiles
AI fakes exploiting distributor loopholes are forcing Spotify and others to tighten identity checks and release controls.
404 Media showed that scammers can upload AI-generated tracks to Spotify, Apple Music, Amazon Music and others under real artists’ profiles via distribution services like DistroKid, then collect the royalties those tracks earn. The attack relies on a loophole where distributors and streaming platforms largely trust self-reported artist identities, so a fraudster can claim to be an existing band and have the song automatically attached to that band’s catalog. Smaller or inactive artists, including dead musicians whose profiles aren’t actively monitored, are especially exposed to reputational damage and revenue loss as hundreds of fake songs can be generated and uploaded in a day. Spotify says it is testing a tool to let artists approve releases before they appear on their profiles and has rolled out verification badges and spam filters targeting mass AI uploads, while working with distributors to block bad submissions. Amazon Music says it is using detection tech and monitoring systems and working with partners and rightsholders to protect artists’ and songwriters’ interests as AI-generated “slop” scales up on streaming services.
Why it matters
The loophole lets scammers divert royalties and damage reputations by passing off AI-generated “slop” as genuine releases from real artists. Smaller or inactive acts, including dead musicians, are at particular risk because no one is actively watching their profiles as hundreds of fake tracks can be pushed live in a day. Spotify’s beta tools for artist sign-off, verification badges and spam filters, along with monitoring by other services, mark a shift toward stricter identity protection on streaming platforms.