Music Producer Arrested for Allegedly Using AI-Generated Songs in $10 Million Streaming Scam

Michael Smith was arrested for allegedly using AI-generated songs and fake streaming accounts to scam over $10 million in royalties from major music platforms. By creating hundreds of thousands of songs and employing bots to artificially inflate streams, Smith circumvented fraud detection systems. The scheme was exposed after suspicions arose regarding the rapid generation of music and streaming anomalies.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The perpetrator used AI-generated music and automated bots to execute a massive financial fraud scheme, stealing millions of dollars in royalties.

Additional risk subdomains

• 6.3 Economic and cultural devaluation of human effort: The massive influx of AI-generated tracks and automated streams diverted royalty payments away from legitimate, deserving human artists and songwriters.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by a human perpetrator who intentionally orchestrated a fraudulent streaming scheme using AI-generated music to steal royalties.

EU AI Act risk tier

• Risk tier: 4 Minimal or No Risk

Minimal or No Risk: The AI system was used for generating music tracks, which is an entertainment application that poses low or negligible risk to society and carries no additional regulatory obligations under the Act.

AI system and alleged parties

• AI system: AI music company
• AI purpose: Voice Generation; Social Media Content Generation
• Behaviour type: Tool
• Alleged developer: Unknown AI music company
• Alleged deployer: Michael Smith
• Alleged harmed parties: Spotify, Music streaming services, Apple Music, Amazon Music

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Substantial, indirect Substantial
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report explicitly describes financial losses of over $10 million (or $8 million) in diverted royalties from a single continuous fraudulent operation.

Directly caused: The average financial loss per occurrence is approximately $8,091,843.64 (the forfeited amount) or up to $10,000,000, representing the fraudulent royalties stolen by the perpetrator.

Indirectly caused: Legitimate artists and songwriters lost millions of dollars in royalties that were diverted from the shared royalty pool due to the fake streams.

People affected

• Occurrences reported: 1

Potential causes

Management

• Inadequate Platform Risk Assessment: Platforms failed to anticipate the scale of AI-generated streaming fraud.
• Slow Response to Fraud Reports: Platforms allowed fraud to continue for years despite early warnings.

Technology

• AI Music Generation Tools: Allowed rapid creation of thousands of songs to bypass anti-fraud policies.
• Automated Streaming Bots: Used to simulate hundreds of thousands of daily streams automatically.
• VPN and IP Disguising: Disguised bot controller's location to evade platform detection systems.

Data Inputs

• Purchased Email Addresses: Used to create thousands of fake listener accounts on streaming platforms.
• AI-Generated Audio Tracks: Served as the massive volume of content uploaded for royalty generation.

Human Factors

• Perpetrator Deceptive Denials: Falsely claimed works were human-authored to avoid detection by the MLC.
• Financial Greed: Motivated the scale of the fraud to steal millions in royalties.

Process and Methods

• Flawed Fraud Detection Systems: Failed to detect distributed streaming of AI tracks across multiple accounts.
• Royalty Distribution Loophole: Allowed automated plays of short, low-quality tracks to divert real funds.
• Inadequate Content Verification: Allowed instant upload of massive volumes of AI music without vetting.

Regulatory Environment

• Delayed Legal Enforcement: First US prosecution occurred years after the fraud started in 2018.

Information quality

• Classification confidence: High
• Reason for confidence: The reports are highly detailed, originating from DOJ indictments and court proceedings, detailing the exact mechanics of the fraud, the amounts involved, and the perpetrator's guilty plea.
• Ambiguities identified: None major, though the exact AI tools/companies used are not named.
• Alternative interpretations: None.

A music producer used AI to generate hundreds of thousands of songs and automated bots to stream them, defrauding streaming platforms of 10 million dollars. While a landmark case of AI-assisted commercial fraud, it presents minor national security implications, representing localized economic crime managed through standard law enforcement procedures.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Michael Smith

Threat characteristics

• Imminence: Long-term. The perpetrator has been arrested and pleaded guilty, making this an ongoing strategic concern regarding AI-enabled fraud rather than an active crisis.
• Autonomy: Human-controlled. The AI was used purely as a tool to generate audio content under the direct control and orchestration of the human perpetrator.
• Novelty: Evolved capability. While streaming fraud is an established threat, using AI to rapidly generate a massive catalog of unique songs to bypass platform detection systems represents an evolved capability.

Impact by dimension

• Physical security: Negligible. No physical systems, infrastructure, or human safety were threatened or impacted by this digital music streaming fraud scheme.
• Information security: Negligible. The incident involved financial fraud and did not compromise intelligence capabilities, classified information, or systematically manipulate public information.
• Sovereignty: Negligible. The scheme targeted commercial streaming platforms and did not disrupt government functions, electoral systems, or state sovereignty.
• Economic security: Minor. The scheme diverted 10 million dollars in royalties from commercial platforms, representing localized economic fraud rather than a systemic threat to national financial stability or strategic industries.
• Societal stability: Negligible. The incident did not involve mass surveillance, algorithmic oppression, or threats to civil liberties and societal stability.