How to spot music fraud before it hits distribution

Scenario: Onboarding a Suspicious New "Label"

A new label, "Global Sound Music," signs up. Within the first 24 hours, they trigger a cascade of red flags.

 They bombard you with questions.

The first support ticket arrives minutes after they upload their first release.

Email Snippet:

Subject: URGENT Qs

Hi, we just uploaded.

1. What is exact time for review?

2. When will we see it on Spotify? Apple Music?

3. What is your minimum payout threshold?

4. Do you pay to Payoneer?

5. How fast can I issue a takedown if needed?

6. Is YouTube Content ID included or extra fee? Thanks, respond ASAP.

This rapid-fire, transactional line of questioning shows their focus isn't on the music, but on the speed and mechanics of monetization and control.

They're overly eager and impatient.

An hour after the first ticket, they open a live chat.

Live Chat Snippet:

Global Sound Music: Hi, I submitted release ID 881234 an hour ago. It is still in review queue. Why? Support Agent: Hello! Our review team checks every release carefully. The current queue is typically 24-48 hours. Global Sound Music: 48 hours is too long. My last distributor was instant. Can you push it through now? This is a very important release.

Legitimate artists understand and respect the review process. This impatience suggests a desire to get content live before it can be properly vetted.

 They ask how long reviews take.

This often comes with probing questions to find loopholes.

Email Snippet:

"Can you tell me the exact business hours of your content review team? Do they work on weekends? If I upload at 11 PM on a Friday, when is the earliest it would be reviewed? I need to coordinate my marketing precisely."

They aren't just curious; they're trying to determine the best time to upload questionable content to minimize the chance of it being caught by a human reviewer.

 They want releases expedited.

A formal request to skip the line often follows, using a manufactured excuse.

Email Snippet:

Subject: URGENT - EXPEDITE RELEASE 881234

Hello Support, You must expedite release 881234. We have a viral TikTok campaign with a major influencer launching tomorrow at 9 AM. If the track is not live on all platforms by then, we will suffer a major financial loss. Please push this to the front of the queue immediately.

This tactic uses false urgency to pressure staff into bypassing standard quality control.

 They shower you with praise, claiming they seek reputable partners.

This is a social engineering tactic to lower your guard.

Email Snippet:

"We are so excited to be working with you. We've heard you are the most professional and reliable distributor in the industry. After dealing with so many bad actors, we are only looking for reputable, long-term partners like yourselves to host our premier catalog."

This flattery is designed to make the reviewer feel like they are dealing with a high-value client, discouraging deeper scrutiny.

 They shuffle catalogs between distributors, claiming consolidation.

They upload a large back-catalog. A quick internal search shows these same tracks were recently taken down by a competitor.

Scenario: You notice their 50-album catalog was live via DistroCorp until last week. When you inquire, they respond:

"Yes, that was us. We were very unhappy with DistroCorp's service and are consolidating all of our assets with a more professional partner. This is the entire catalog."

This is classic "distributor hopping." They were likely banned by the previous distributor for fraudulent activity and are trying to get the same content back online elsewhere.

 They "forget" to reuse ISRCs or want a "fresh start."

You notice their "consolidated" catalog has no ISRC codes provided.

Support Interaction:

Agent: "For a catalog transfer, please provide the original ISRCs for each track to retain streaming history." Global Sound Music: "We no longer have access to those codes. It is fine, we want a fresh start anyway. Please assign new ISRCs."

This is a deliberate attempt to erase the tracks' history. Reusing an ISRC links a track to its past performance, including any fraud flags or royalty disputes. A "fresh start" is a way to wipe the slate clean.

 They sign up with one name, then request a change.

The account was registered by "Mike Jones" from the US. A week later, you get a request.

Email Snippet:

"Hello, please update the account holder and payment information. The account will now be managed by our CEO, 'Dmitri Ivanov'. All payments should be directed to his Wise account."

This can be a method to obfuscate the true identity of the operator, often using a common initial name for setup before switching to the real (or another fake) operator.

Some tracks have millions of Spotify plays.

One of the uploaded tracks, "Midnight Drive," by an artist named "Aural Scapes," already shows 4.5 million streams on Spotify.

This is a massive red flag. They are likely moving a track that has already accumulated fraudulent (botted) streams to a new distributor to try and collect the royalties before the streaming service identifies the fraud and claws the money back from the original distributor.

 Their artists? Ghosts online.

You search for the artist "Aural Scapes." You also search for their other artists, "Neon Bloom" and "Static Dreams." Despite having millions of plays, you find:

• No official website.

• No Instagram, TikTok, or Facebook presence.

• No tour dates, no interviews, no photos of the artist.

• The only online results are the Spotify profiles themselves, often created by other distributors.

Real artists, especially successful ones, have a digital footprint. An absence of any online identity strongly suggests the artist persona is completely fabricated.

Catalogs seem legit but are often under different names elsewhere.

While investigating a track from "Neon Bloom," you run an audio recognition search. The exact same song is found on a 3-year-old YouTube video titled "Free Lo-Fi Beat - 'City Lights' - Prod. by Kenji" with a Creative Commons license. "Global Sound Music" has simply stolen it and renamed it.

 Artists have famous names but aren't musicians, tricking search traffic.

They submit an album of generic piano music by an "artist" named "Dr. Eleanor Vance." A Google search for this name leads to a well-known psychologist and author. The album art is a stock photo of a distinguished-looking woman. This is designed to capture search traffic from people looking for the real Dr. Vance.

They’re fine verifying IDs due to minimal consequences.

When their account is flagged for a KYC (Know Your Customer) identity check, they comply almost instantly.

Response:

"No problem, we understand the need for security. Attached is the passport for our account manager. Let us know if you need anything else to proceed."

To them, an identity is disposable. They may be using their own, a paid third party's, or a synthetic/stolen ID. If the account is banned, it's a small loss; they have more IDs and will simply create a new account.

 Some work in groups.

Over the next few days, you see three more new sign-ups: "Global Trax," "Sound Sphere Digital," and "World Beat Masters." They all upload similar-sounding lo-fi/ambient music, their support tickets use the same grammatical quirks, and they all request payment to different but newly created digital bank accounts. This is a fraud ring spreading their assets to avoid a single point of failure.

Some blatantly distribute copyrighted content unchanged.

Finally, they upload a new release: "Movie Hits Remastered" by "Cinema Sounds Inc." The album contains a track-for-track, unaltered rip of the official Top Gun: Maverick soundtrack. They are betting on the small window between the upload and the takedown to earn royalties from a massively popular album.