The images in this article were generated with artificial intelligence. How we publish
A North Carolina musician pleaded guilty after admitting that he got millions of dollars through a sophisticated fraud against streaming services: he generated and raised hundreds of thousands of tracks created by artificial intelligence, then made them sound artificially billions of times with bots to collect royalties. According to the judicial documents, the scheme operated for several years and exploited the payment rules for platforms such as Spotify, Apple Music, Amazon Music and YouTube Music.
The economic figure is no less: we are talking about more than $10 million in royalty payments that the defendant obtained through this system. The Department of Justice and the Office of the Federal Prosecutor of the Southern District of New York published information on the prosecution and the roles of the case; the official communiqué is available on the government's website ( Department of Justice communiqué) and the court documents that were revealed at the start of the case ( judicial documents).

The modus operandi combined two elements: on the one hand, the mass production of songs with IA tools and on the other, the use of automated accounts to inflate reproductions. Sources of the case detail that the defendant bought large lots of tracks generated by a third person and uploaded them to the streaming catalogues. For these tracks to account for reproductions and generate payments, he used bots that simulated listening from many different directions, using cloud services and virtual private networks (VPN) to try to avoid platform anti-fraud systems.
Rationality of fraud: The posts and records of the defendant himself show that the strategy sought "a lot of content with few reproductions per track" to avoid alarms: that is to say, multiply the songs and distribute the listeners so that the set will add up huge amounts without shooting off peak detections on specific topics. At the time he managed hundreds of cloud accounts and coordinated more than a thousand simultaneous bots, with internal calculations on how many tracks each bot could play a day and what average revenues would generate those volumes.
The numbers in the file are illustrative of the scale: the defendant planned to operate dozens of accounts in the cloud, each with multiple bots, and estimated that the whole could generate several hundred thousand streams a day. With a conservative estimate of the reproduction payment, these figures were translated into thousands of dollars per day and hundreds of thousands per month, according to their own calculations. In subsequent posts he also boasted that the project had accumulated billions of streams and millionaire payments since 2019, according to prosecutors.
Why does this hurt the industry? Because platforms distribute money that comes out of subscriptions and advertising; when royalties are paid for fraudulent reproductions, that money stops reaching legitimate artists, producers and headlines. In addition to the direct economic impact, fraud masks real consumption data, makes it difficult to detect trends and erodes trust between creators and digital distribution services.
In the face of this type of abuse, the platforms offer tools and policies to identify abnormal behavior and purify metrics. Spotify, for example, has guides and processes to account for and distribute royalties and to investigate suspicious activity in artist accounts ( royalties in Spotify for Artists). However, the case shows that the combination of generative IA and automated networks complicates detection: it is a race between fraud techniques and control mechanisms.
From the legal point of view, the accused pleaded guilty to a charge of conspiracy to commit electronic fraud and accepted a confiscation of more than $8 million; he also faces a maximum sentence of up to five years in prison. The prosecutor's office stressed that, although the songs and listeners were fictitious, the losses to legitimate rights holders were real, and criminal action seeks both restitution and deterrence ( Public prosecutor's statement).

Beyond individual punishment, this episode opens a broader discussion on how to regulate and audit value chains where artificial intelligence can generate content without clear human authorship. Public institutions and copyright management bodies must be adapted: source verification systems, more reliable metadata and agile audit processes become necessary tools to protect creators and consumers. For those who want to deepen the legal framework and the possibilities of defence of works, the U.S. Copyright Office. United States. provides resources and guides on registration and protection.
This case also highlights the importance of transparency in payments and collaboration between platforms, editors and collective management bodies. The companies that pay royalties must invest in more sophisticated detection systems and protocols that allow an efficient verification of the authenticity of a catalogue. And artists, for their part, should be attentive to their reports, register their works correctly and use collective management organizations to audit suspicious revenues.
In short, what happened is not just a technical fraud: it's an alert call. on how artificial intelligence multiplies abuse vectors in digital metric-based industries. The solution does not go through a single technology, but through a combination of better controls, cooperation between actors and up-to-date legal frameworks that allow for rapid sanctions and the restoration of diverted funds.
Related
More news on the same subject.

Florida, Iowa, Montana and Nebraska sue TP-Link Systems for security and source of routers
On October 6, four State Attorney General filed complaints against TP- Link Systems in U.S. state courts - in addition to a previous Texas lawsuit - for business practices relat...

FBI and six countries link Integrity Technology Group to entity post theft in SE Asia
On October 8, the FBI and agencies in six countries issued a joint warning that assigns to a Chinese company, Integrity Technology Group, a sustained series of intrusions whose ...

Campaign with LLM and ARTEX attacks South Korean financial institutions and exfilters data
Security researchers have documented a campaign directed against South Korean financial institutions using language-driven attack tools to automate intrusions and data extractio...

ChainDrop campaign exposes tensorlake in npm; version 0.5.144 withdrawal
A package of npm called tensorlake, an SDK in TypeScript oriented to Tensorlake applications and services, was engaged in a supply chain campaign linked to the attack family kno...

Google reports DNS kidnapping: TLS certificates for google.com.gh, google.sl and google.as
Google reported on October 6 that attackers managed to issue unauthorized HTTPS certificates for Google and YouTube names after compromising authoritative DNS records of three t...

Cyber risk in 2026 moves to workflows and IA, according to Voice of the CISO
The data added by five editions of the Voice of the CISO study - including the most recent findings of 2026 - draw a less intense change than risk location: the threat is moving...

Phishing BitB points to advertising professionals and account managers to steal MFA
Security researchers have described a phishing campaign for advertising professionals and account managers that uses a human-operated platform to mimic ad products linked to IA ...