Fake AI Songs Are Appearing Under Real Artists' Names on Streaming Services

A surprise new drop from your favorite musician might not be their work at all. Cybercriminals are utilizing generative AI tools to generate songs, render synthetic cover art, and upload tracks to Spotify, Apple Music, and Amazon Music under the names of legitimate recording artists to siphon streaming royalties.

According to security researcher Benjamin Lloyd in a report published by Panda Security, this scheme exploits persistent verification gaps in commercial digital music distribution. Fraudsters generate audio using generative music engines, register the files with third-party digital music distributors claiming artist ownership, and rely on automated ingestion pipelines to distribute the counterfeit tracks directly to verified artist discographies.

The turnaround is remarkably fast. Testing conducted by investigative outlet 404 Media demonstrated that uploading an AI-generated track under the profile of an active indie band took just five minutes. Within days, the fraudulent track was syndicated and indexed across major streaming networks, including Spotify, Apple Music, Tidal, and Amazon Music.

Who Collects the Royalties?

The motivation behind streaming identity theft is direct financial extraction. Streaming royalties are disbursed to the account that distributed the track, leaving the impersonated artist with nothing while the scammer collects monthly payouts.

Co-opting an established artist profile provides immediate advantages:

• Algorithmic Exposure: Attaching a track to an established name triggers release radar playlists, discovery algorithms, and automated fan notifications, delivering far higher organic play counts than unbranded uploads.
• Industrial Scale: Where generating a passable audio forgery previously required studio tools and hours of production, modern text-to-music models allow bad actors to produce, package, and upload hundreds of tracks in a single day.
• Vulnerable Targets: While top-tier pop stars have legal and management teams monitoring their catalogs, smaller indie acts, dormant artist profiles, and deceased musicians are common targets because their catalogs are rarely audited daily.

The fraud impacts fans as well. Synthetic tracks corrupt algorithmic recommendation profiles and listening histories. Furthermore, researchers warn that malicious actors can place phishing URLs or deceptive promotions in song descriptions, lyrics metadata, or canvas video links to distribute malware or credential harvesting schemes.

How to Spot and Report a Fraudulent Release

While streaming providers continue deploying updated fraud filters and beta testing pre-release catalog verification tools, music fans can protect their accounts by watching for key red flags:

• No Official Announcements: Genuine new releases are almost universally promoted across the artist’s official social channels, newsletter, or website before appearing on streaming platforms.
• Odd Audio and Visual Quality: Be skeptical of erratic vocal phrasing, uncanny valley artwork, unnatural instrument textures, or artwork featuring distorted text and visual artifacts common in generative AI imagery.
• Mismatched Metadata: Check the songwriting credits and record label information listed under the track options. Unfamiliar publishing names, generic pseudonyms, or missing production credits strongly point to unauthorized uploads.

If you come across a suspected spoofed release, do not save or add it to personal playlists, as this feeds platform recommendation engines. Use the in-app reporting tool (typically found under the track settings menu) to flag the song for impersonation, and alert the artist’s management team through their official social media handles.

Never follow external links found in suspicious track descriptions promising unreleased albums, free merchandise, or early tour presales. If an external link directs you to an unfamiliar ticketing or download portal, verify its registration age and security status using ScamAdviser's Website Checker before entering personal details. For real-time defense against malicious redirect links on your device, download the ScamAdviser Mobile App, and report fraudulent platforms directly via ScamAdviser's Report a Scam portal.

Source: Benjamin Lloyd, "An unexpected release by your favorite artist? It could be a scam…," Panda Security Mediacenter, October 19, 2026, citing research by 404 Media.