AI Music Counterfeits and How to Protect Your Songs

What is actually happening

The pattern is simple. Scammers watch social media for clips of unreleased songs. When something gets traction, they run it through a generative audio model that extends the snippet into a full track. They upload it to Spotify, Apple Music, and the rest through a third-party distributor. Sometimes the fake lands under an invented artist name designed to rack up streams. And sometimes, more disturbingly, it lands directly on the real artist's profile.

This is not just happening to the big names. Independent artists are actually more vulnerable than established ones, because star names have label lawyers and publicists monitoring this stuff. Smaller artists find out the way Murphy Campbell did: fans started messaging the North Carolina folk singer about new tracks on her Spotify page, and she opened the app to find two songs she had never recorded. "It was this computer mimicking my voice," she told Rolling Stone, "and trying to play the banjo and dulcimer really poorly. I laughed for a long time. And then I was hard to be around for a few days because I was so frustrated." British folk artist Emily Portman found an entire fake album on her profile in 2025 despite not having released anything since 2022. She described the AI vocals as having "pristine perfection" but "vacuous lyrics," and it took Spotify three weeks to remove it. Luke Temple, frontman of the indie band Here We Go Magic, woke up to Instagram DMs saying "Apparently Here We Go Magic released a new track?" Paul Bender of Hiatus Kaiyote found four AI songs added to his side project's profiles, watched them reappear after removal, and eventually launched a petition about it that gathered 24,000 signatures.

The indie folk and Americana world has been especially hard hit. Father John Misty, Jeff Tweedy, Sam Beam of Iron and Wine, Teddy Thompson, and Jakob Dylan were all targeted, apparently from the same operation using the same AI artwork style. Jazz is another hot zone. Jazz pianist Jason Moran found a fake EP on his profile and noted there wasn't even a piano player on the whole record. Analysts suspect jazz is being targeted partly because the genre has complex discographies that casual listeners can't easily authenticate. And instrumental music is actually easier to fake convincingly than vocal music, since there's no voice to clone. Style alone is often enough to fool a streaming algorithm and plenty of listeners.

How a fake ends up on your profile

Most people assume this would be technically difficult. It isn't. Streaming platforms don't work like a social media account where you log in and post your own music. You go through a distributor, which sends your songs and metadata to the platforms in bulk. That metadata tells Spotify who made the track, which album it belongs to, when it was released. When a distributor delivers a track with your name in the metadata, Spotify automatically associates it with your existing profile. There's no identity verification. The whole system runs on the honor system.

When a scammer intentionally puts your name in that metadata, the fake shows up on your profile. Your monthly listeners get it in their Release Radar. Your fans click on what looks like a new song. The scammer collects the streaming royalties. If they're running bots to inflate play counts on top of that, the money adds up fast. Prosecutors have documented cases of individuals earning millions this way over years of operation. It isn't always targeted at a specific artist. Some operations just bulk-upload under any name that will stick. But either way, you're the one dealing with the fallout.

There's a second exploit worth knowing. Scammers can tag real artists as collaborators on a fake release, which causes the track to appear on the real artist's page through the platform's collaboration feature. Same outcome, different entry point.

The bigger risk isn't a lawsuit. It's getting flagged as the infringer of your own song.

You may have heard that scammers are also suing original artists for infringement once the real song drops. As of this writing, that's more rumor than documented pattern. The more common harm is subtler. When a counterfeit hits streaming first, platform content-matching can flag your real release as the infringer. Not a lawsuit, but your song gets blocked or demonetized while you fight to prove it's yours.

Spotify has publicly called artist identity protection a top priority for 2026. The Artist Profile Protection launch in late March is the first real platform-level tool built for this. It doesn't fix the broader spam problem, but it gives you direct control over what appears under your name. Apple Music and Tidal haven't announced anything equivalent yet, so your exposure on those platforms is higher for now, and DMCA takedowns are still your main tool there.

What actually protects you

The strategy is simple: get there first and make it obvious you're the source. Each step below is explained in enough detail to act on today.

If a counterfeit shows up under your name

No strategy is bulletproof. A counterfeit under an invented artist name can still reach streaming even if you've done everything above. What all those steps do is improve your position and your response time. None of what follows requires an attorney upfront.

First, document everything. Screenshot the counterfeit release. Grab the artist page, release date, track metadata, distributor credit (visible on the Spotify or Apple Music release page), and stream counts. Save all of it before you do anything else, because the counterfeit can disappear once you start filing.

Report through platform tools. Every major service has a misattribution or impersonation form. Spotify for Artists has a dedicated "wrong music on profile" flow. Apple Music for Artists has something similar. Distributors like DistroKid, TuneCore, Symphonic, and CD Baby all have abuse reporting that can pull a fraudulent upload at the source.

Alert your community. Your real fans are a detection layer no scammer can replicate. Tell your mailing list, your fan group, whoever is paying attention. The Torus case got sorted out because fans recognized the fake and reported it.

File a DMCA takedown. Free, fast, and platforms take it seriously because ignoring it creates legal liability for them. Keep the language factual, reference your original work and its dates, and attach your evidence.

If it escalates. The Copyright Claims Board, created in 2022, handles disputes up to $30,000 without a lawyer. You need a registered copyright to use it. For anything beyond that, a short paid consult with an entertainment attorney is worth it. Expect a first consult to run one to two hundred dollars. A good one will tell you honestly whether it's worth pursuing.

A note on registering with the Copyright Office

Most independent musicians have never formally registered a song. That's worked fine for a long time, and for casual material, it may still be fine. What's changed is the calculation for anything you're putting real promotional weight behind. Copyright technically exists from the moment a song is fixed in a recording. Registration is what gives you the ability to sue, recover statutory damages up to $150,000 for willful infringement, and recover attorney's fees. Without it, those options aren't available.

You can register unpublished works, and you can register multiple songs together as an unpublished collection for a single fee, roughly $85 online. Pre-registration covers the promo window. Full registration, done within three months of release, locks in your full set of legal options. Think of it as a habit worth building for the releases that matter, not a box to check before every voice memo.

Most of these tools are old. DMCA takedowns have existed since 1998. Performance rights organizations since 1914. Copyright registration is older than recorded sound. What's new is the urgency, and one genuinely new tool: Spotify's Artist Profile Protection. The cost of ignoring all this has gone up, because the cost of counterfeiting a song has come down. The time to build these habits is now.