On September 10, the Brooklyn-based punk band Lathe of Heaven released a new single on its verified Spotify page called Riding High. Any fan of Lathe of Heaven would have immediately noticed that the song sounded nothing like the band’s previous work, that the vocals were not from lead singer Gage Allison, and that the album cover was widely different from the style and logo the band used previously.
That’s because Lathe of Heaven didn’t write, perform, or willingly release Riding High. I created the song with a simple prompt given to the AI music generator Udio, and I was able to release the track on Lathe of Heaven’s official Spotify page, as well as on its Apple Music, Tidal, and Amazon Music pages, without the band’s knowledge, by exploiting a glaring loophole in the way music is digitally distributed to streaming platforms.
The loophole has existed for years, but people who make AI slop music are now widely abusing it. Today, anyone can easily hijack a real artist’s Spotify page and flood it with AI-generated music. When someone clicks one of those tracks expecting to hear music from their favorite artists, the scammer will collect whatever royalties those streams generate, essentially piggybacking on their popularity, and the listener will hear low quality slop instead of their favorite artist. Various instances of this scam have been documented in the past, but 404 Media was able to identify and replicate the exact loophole scammers are exploiting. It was trivial to do, and neither music streaming platforms nor digital music distributors are taking responsibility for the problem.