Streaming the System: How AI Bots Helped a Musician Steal Millions in Royalties

In a story that reads like a cyber-thriller, Michael Smith, a little-known North Carolina musician, orchestrated one of the most audacious heists in the digital music world - using artificial intelligence and an army of bots to siphon millions in royalties from the world’s biggest streaming platforms. The tracks were fake, the listeners were fake, but the money was very real.

Fast Facts

• Michael Smith pleaded guilty to orchestrating a $10 million streaming royalty fraud scheme.
• Used AI-generated songs and automated bots to rack up billions of fake streams on Spotify, Apple Music, Amazon Music, and YouTube Music.
• Employed more than 1,000 bot accounts, masked with VPNs, to avoid detection by anti-fraud systems.
• Smith and his accomplices generated over 4 billion fake streams, diverting royalties from legitimate artists.
• He faces up to 5 years in prison and must forfeit over $8 million.

The Anatomy of a Digital Heist

Between 2017 and 2024, Michael Smith masterminded a scheme that weaponized the very technologies meant to democratize music. With help from an unnamed music promoter and the CEO of an AI music company, Smith purchased hundreds of thousands of AI-generated songs. These tracks - created at lightning speed and in bulk - were uploaded to popular streaming platforms under various aliases.

The real innovation came in the form of AI bots. Smith ran over 1,000 bot accounts, all disguised behind virtual private networks (VPNs), to simulate authentic listeners. Each bot streamed hundreds of songs every day, collectively generating millions of plays and triggering royalty payments from the platforms. To further obscure his activities, Smith spread his bots across 52 different cloud service accounts, making detection even harder for anti-fraud systems.

In internal emails, Smith laid out the cold math: at an average royalty of half a cent per stream, the operation could rake in over $1.2 million a year. By flooding platforms with content and carefully managing stream counts, he evaded the algorithms designed to spot suspicious activity. Prosecutors say Smith’s bots amassed over 4 billion streams, resulting in more than $10 million in fraudulent payouts - money that should have gone to genuine artists and rights holders.

Smith’s elaborate digital laundering scheme only unraveled after investigators pieced together email evidence and streaming data, revealing the scale of the fraud. In February 2024, Smith even bragged to his co-conspirators about the scheme’s success: billions of streams, millions in royalties, and no immediate signs of detection.

Aftermath and the Future of Streaming Fraud

Smith has agreed to forfeit over $8 million and faces up to five years in prison. But the case sends shockwaves through the music industry, highlighting the vulnerability of streaming platforms to sophisticated, tech-driven fraud. As AI tools and automation become more accessible, the challenge for platforms - and law enforcement - is only growing. The line between creative innovation and criminal exploitation has never been thinner.

WIKICROOK

• AI: AI, or Artificial Intelligence, is technology that enables machines to mimic human intelligence, learning from data and improving over time.
• Bot account: A bot account is an automated digital profile that mimics human behavior online, often used for spreading spam, misinformation, or automating tasks.
• Virtual Private Network (VPN): A VPN is a service that encrypts your internet connection and hides your real location, making your online activity more private and secure.
• Streaming royalty: Streaming royalty is a payment to artists or rights holders for every play of their music on digital streaming platforms like Spotify or YouTube.
• Anti: 'Anti' refers to methods used by malware to avoid detection or analysis by security tools and researchers, making threats harder to study or stop.