Spotify AI盜曲評測:3.75美元冒名上架真樂團頁面 | Spotify AI Scam Review: $3.75 Steals Your Artist Page
By Kit 小克 | AI Tool Observer | 2026-09-22
🇹🇼 Spotify AI盜曲評測:3.75美元冒名上架真樂團頁面
Spotify AI盜曲事件本週在Hacker News和音樂圈炸鍋:記者只花5分鐘、3.75美元,就把一首用Udio生成的AI歌曲,塞進一支真實龐克樂團的官方Spotify頁面,Apple Music、Tidal、Amazon Music也同步中招。這不是駭客攻擊,而是利用數位發行商一個放了多年的老漏洞。
Spotify AI盜曲怎麼運作
404 Media記者Emanuel Maiberg實測的流程其實很簡單,任何人都能照做:
- 用Suno或Udio生成一首AI歌曲,再用AI做張專輯封面
- 付幾塊美元訂閱DistroKid之類的數位發行商
- 上傳時謊稱自己就是該藝人本人
- 系統直接把新曲併入該藝人「既有」的官方目錄
- 新曲隨後自動同步上架到Spotify、Apple Music、Tidal、Amazon Music
整個過程沒有身份驗證,發行商幾乎照單全收。冒名者不只污染藝人頁面,還能實際領走串流分潤——原本該進真藝人口袋的錢,變成盜曲者的收入。
規模有多大
這不是單一個案。Spotify每天有約5萬首AI生成歌曲上架,音樂人Odette Child光自己調查就抓到超過300首冒名她與其他藝人的AI盜曲。中小型、沒有經紀團隊在盯的藝人頁面最容易被盯上,甚至已過世音樂人的帳號也被拿來盜刷。
平台在做什麼、你該注意什麼
Spotify回應稱正與發行商合作「從源頭擋下惡意上傳」,並從今年3月起就在小範圍測試一個讓藝人上架前先審核新曲的驗證工具——但至今仍卡在beta階段,沒有全面上線。換句話說,短期內這個漏洞不會被徹底補上。
如果你是獨立音樂人:定期搜尋自己的名字比對Spotify曲目、開通Spotify for Artists通知、確認發行商帳號有沒有異常登入,是目前唯一能做的自保方式。如果你只是聽眾:看到喜歡的藝人突然冒出風格詭異的新歌,先別急著按讚,去官方社群帳號確認一下。
好不好用,試了才知道。
🇺🇸 Spotify AI Scam Review: $3.75 Steals Your Artist Page
A Spotify AI music scam just went viral on Hacker News: a journalist spent 5 minutes and $3.75 to upload an AI-generated Udio track onto the verified Spotify page of a real Brooklyn punk band — and it synced to Apple Music, Tidal, and Amazon Music too. This isn't hacking. It's a distributor loophole that's existed for years and is now being abused at scale.
How the Spotify AI Music Scam Works
404 Media's Emanuel Maiberg documented the exact steps, and any listener can replicate it:
- Generate a track with Suno or Udio, and an AI album cover to match
- Sign up for a digital distributor like DistroKid for a few dollars a month
- Claim to be the real artist when submitting the release
- The distributor merges the fake track into the artist's existing catalog
- It auto-syncs to Spotify, Apple Music, Tidal, and Amazon Music
There's no identity check at any step. Distributors approve almost everything. Worse, the scammer can collect the streaming royalties — money that should have gone to the real artist instead lands in the impersonator's account.
The Scale Is Bigger Than One Prank
This isn't an isolated stunt. Spotify receives roughly 50,000 AI-generated songs a day, and musician Odette Child personally found over 300 fraudulent AI tracks impersonating herself and other artists. Small and unmanaged artist pages are the easiest targets — even deceased musicians' catalogs have been hit.
What Platforms Are Doing — and What You Should Do
Spotify says it's "working directly with distributors to stop bad submissions at the source" and has been testing a pre-release verification tool for artists since March — but it's still in limited beta, not a platform-wide fix. Don't expect this loophole to close soon.
If you're an independent artist: search your own name against your Spotify catalog regularly, turn on Spotify for Artists alerts, and watch for unfamiliar logins on your distributor account — that's the only real protection right now. If you're just a listener: when a favorite artist drops a track that sounds oddly off, check their official social accounts before you stream or share it.
好不好用,試了才知道。
Sources / 資料來源
- 404 Media: I Hijacked a Real Artist's Spotify with AI Music
- Engadget: Scammers Inserting Fake AI Songs Onto Real Artist Pages
延伸閱讀 / Related Articles
- Grok 4.7評測:編碼分數衝高,代幣成本現形 | Grok 4.7 Review: Coding Gains, Token Costs Exposed
- 模型疲勞評測:AI大廠一週狂發新版,你該追嗎 | Model Fatigue Review: AI Labs Ship New Versions Weekly
- Anthropic威脅報告評測:一人成軍,詐騙駭客全靠AI | Anthropic Threat Report: One Hacker, State-Level Power
AI 工具觀察站 — 每日精選 AI Agent 與工具趨勢
AI Tool Observer — Daily curated AI Agent & tool trends
留言
張貼留言