I Hijacked a Real Artist's Spotify with AI Music. It Was Disturbingly Easy

Anyone who pays for music streaming or relies on artist royalties may soon see AI-generated content polluting official artist pages.

A journalist discovered a significant loophole in digital music distribution that allows AI-generated music to be easily uploaded to a real artist's official streaming profiles without their knowledge or consent. The process involved using an AI music generator, creating an account with a digital distributor like Distrokid for a nominal fee, and then falsely assigning the AI-generated track and album art to an existing artist's name, such as the band Lathe of Heaven. The distributor verified none of the submitted information, facilitating the fraudulent release on platforms including Spotify, Apple Music, and Tidal. This exploit enables scammers to collect royalties from streams intended for the legitimate artist, while listeners are presented with low-quality AI music. The vulnerability appears particularly effective against lesser-known or deceased artists, though major artists are not immune.

The ease with which AI-generated music can be appended to legitimate artist profiles highlights a critical failure in the digital music distribution pipeline, where distributors like Distrokid act as gatekeepers with insufficient verification. This not only defrauds listeners and legitimate artists but also poses an existential threat to emerging musicians who rely on recognition and organic discovery. The lack of accountability from both distributors and streaming platforms like Spotify, who cite technical challenges in AI detection, suggests a prolonged period where this exploitation could continue unchecked.

This exploit reveals a systemic vulnerability that could drastically alter the economics and authenticity of music streaming, potentially devaluing human artistry and eroding trust in digital platforms. While Spotify claims to be implementing measures like "Artist Profile Protection," the fundamental issue of unverified uploads at the distributor level remains unaddressed. The industry's slow response indicates that listeners might increasingly encounter AI-generated content masquerading as human-created work, forcing them to become more discerning or rely on third-party filtering tools.