Somebody slid into your DMs with a package. Two hundred dollars, playlist placement, guaranteed streams, screenshots of somebody else's numbers going vertical. You paid it because the single had been sitting at four hundred plays for three weeks and the algorithm was not coming.

Three weeks after that, your distributor's dashboard shows a deduction you did not authorize and a track that has quietly stopped earning. Nobody called. Nobody asked whose idea it was.

That is the part of streaming fraud almost nobody explains to artists: the penalty lands on the release, and through the release, on you. Not on the promoter. Not on the guy with the Telegram channel. You.

What the platforms actually say

Spotify's artificial streaming policy defines the offense broadly: any stream that "doesn't reflect genuine user listening intent, including any instance of attempting to manipulate streaming services like Spotify by using automated processes." The consequences are stacked. Those streams earn no royalties. They do not count toward public stream numbers or charts. They do not feed the recommendation systems, which is the whole reason people buy them. The track comes off Spotify's own playlists. And in cases where a release "appears to be primarily a vehicle to enable artificial streaming," it comes off the platform.

The company is candid on its consumer support page about paid promotion. Services that guarantee streams in exchange for payment, it says flatly, "violate our terms & conditions." Withheld royalties, corrected public numbers, playlist removal, and possible takedown follow. Note what is missing from that list: any exemption for an artist who did not know.

Since April 2024, Spotify has charged labels and distributors a fee per track when flagrant artificial streaming is detected. Spotify itself does not publish the dollar amount. Your distributor does.

The bill, in the distributors' own words

TuneCore's help center states that Spotify "currently charges a monthly €10 penalty to labels and distributors for each track deemed to have high levels of artificial streaming activity," assessed on a per-track, per-month basis. UnitedMasters describes the same charge as "the USD equivalent of EUR 10 (around $10.70, as of June 28, 2024) for each track that generated a fee," taken directly from your Wallet balance under a line item that names it. FUGA puts it at ten euros per track per month, deducted straight from royalties, appearing on the self-billing invoice as a mutation rather than as a line in your raw royalty report, which is a polite way of saying most artists will never see where the money went.

The recurring part is what gets people. This is not a one-time fine. FUGA warns that leaving a flagged track live "may result in recurring monthly penalties." An artist who gets the notice, does not understand it, and lets the release sit there is paying rent on a mistake.

Apple Music runs a percentage model instead, and it got more expensive this year. Fraud penalties introduced in 2022 at a band of 5 to 25 percent of royalty value were doubled in February 2026 to a band of 10 to 50 percent. Oliver Schusser, vice president of Apple Music, framed the increase this way: "This is a zero-sum game. I would like to live in a world where we have zero fraud on the platform, and this has been a very effective tool. Increasing the penalties takes the money from people who are cheating and puts it back into the system for those who aren't." Apple says it demonetized two billion fraudulent streams in 2025, roughly seventeen million dollars in royalty payments.

Read your distributor's terms before you need to

The consequences vary more than most artists realize, and the differences should matter when you are choosing a music distributor for a project.

TuneCore removes flagged tracks from all streaming and download platforms, charges fees against your account balance or the payment method on file, and states that you "will not be able to reupload or redistribute tracks that have been removed due to artificial streaming." That is a permanent kill on the release, not a timeout. Your account may also be shut down entirely.

CD Baby's language is the one every artist should read twice. Artificial activity generates no royalties, a flagged release "will also incur a penalty charge" passed through under the artist agreement, and, in the sentence that defines this whole area: "Any flagged artificial activity, whether intentional or not, can result in a strike."

DistroKid's definition is written the same way, covering an artist who uses artificial means "or their music is involved in such practice." Its guidance page for artists who receive a Spotify notice offers no appeal process at all. It tells you to re-upload with the same ISRC and to report suspicious playlists through Spotify's playlist reporter tool. That is the entire remedy.

Symphonic is the outlier worth naming, because it reserves the right to allocate penalties "as fairly as possible to the party responsible" and offers an explicit reassurance that it will not penalize or terminate artists following best practices. Whether that discretion helps you in a specific case is unknowable in advance, but the presence of the sentence is a real difference in distribution deals, and it is the kind of clause worth reading for before you sign.

How big the problem is, and why enforcement keeps tightening

Beatdapp, the detection firm now embedded across a good chunk of the industry, estimates that at least 10 percent of global streaming activity is fraudulent, running as high as 30 percent at mid-sized services, with something near two billion dollars a year in misallocated revenue. Deezer reported that 8 percent of all streams across its catalogue in 2025 were fraud, that it detected and tagged 13.4 million AI tracks that year, and that 85 percent of streams on AI tracks were detected as fraudulent and demonetized.

Executives are done being diplomatic about it. Simon Robson, president of recorded music for EMEA at Warner Music Group, said this spring: "There's a finite pot of money and anything which is taken away by bad actors, organised crime, impacts the art of very hard-working artists and songwriters, so it is a major issue." He added a second thought that should worry anyone relying on a promo vendor: "We're underestimating how clever these bad actors are and how they're finding loopholes."

Dennis Kooker, president of global digital business at Sony Music, put a number to his own estimate: "But could somewhere between 5% and 10% of the streams be fraudulent? Yeah, I think that's possible."

Enforcement has followed. In Denmark, the Western High Court increased a streaming fraudster's sentence to two years in February 2025, with confiscation of 3.5 million Danish kroner and a company fine on top. In Brazil, a São Paulo court ruled in April against Boom de Seguidores, a service selling artificial engagement across Spotify, SoundCloud and YouTube Music, ordering permanent domain blocking and penalty fees. The first American criminal case, against Michael Smith of Cornelius, North Carolina, produced a guilty plea to conspiracy to commit wire fraud in March and a forfeiture order of $8,091,843.64. Sentencing was scheduled for July 29 before Judge John G. Koeltl in the Southern District of New York; the outcome is not on the public record as of this writing.

The vendor question, asked properly

Christine Barnum, then chief operating officer at CD Baby, described the trap in a single sentence: "There are instances of artists signing up for 'marketing services' that are actually committing fraud."

The problem is that legitimate playlist promotion and bot farming look identical from the outside. Both promise placement. Both show you screenshots. Both take a card number. So stop evaluating the pitch and start evaluating the mechanics.

Ask who owns the playlists and get names. A real curator or pitching service is placing your record in front of human editors and independent playlist owners who choose to add it; they can tell you which playlists, run by whom, with what audience. Ask whether they guarantee a number. Any guaranteed stream count is, by Spotify's own published language, disqualifying. Ask where the listeners come from geographically, and be suspicious of a campaign that lights up in a country where you have no fanbase. Ask for the campaign report to come from a platform dashboard rather than a screenshot. And get the no-artificial-streaming commitment in writing before you pay, because it is the only document you will have if the flag lands.

Then watch your own numbers. Streams climbing while saves, follows, playlist adds and listener-to-stream ratios stay flat is the classic bot signature. Real fan development is messy and produces messy data. Bots produce clean, boring, vertical lines.

What to do the day a notice arrives

Screenshot everything immediately: the notice, your distributor dashboard including the deduction, your platform analytics for the affected window, and the full listener geography breakdown. Pull every record of the vendor relationship, the invoice, the payment, the messages, the deliverables promised. If a third party did this, those documents are the whole of your case.

Report suspicious playlists to the platform directly rather than waiting for your distributor to do it. Decide quickly whether to take the track down, because on a per-track, per-month charge, indecision is a recurring expense. And do not simply re-upload under a new ISRC hoping for a clean slate; some distributors treat that as evasion, and TuneCore's terms already bar re-upload of removed tracks outright.

Why this gets tighter, not looser

In mid-September, Spotify's AI Persona badges go live, tagging profiles built around AI-generated performers in search, on artist pages and in track rows, and excluding them by default from editorial and algorithmic recommendation. Australia's ARIA made wholly AI-generated tracks ineligible for its charts as of August 28, and the rule ties eligibility not only to human authorship but to raising "no stream or chart manipulation concerns." Annabelle Herd, ARIA's chief executive, called the changes an effort "to remain dynamic and promote the human nature of artistry in what is, to say the least, a rapidly developing space."

The direction is unmistakable. Platforms are building the machinery to distinguish authentic listening from manufactured listening, and every step tightens the screws on anybody whose numbers cannot survive inspection. We covered the selective-enforcement argument when RBX amended his suit against Spotify, alleging the platform polices the bottom of the catalogue harder than the top. Whether or not that claim survives, the practical lesson for a working artist runs the other way: you are the bottom of the catalogue, and you will be policed first.

The same industry that is now arguing about AI in the studio has already settled the question of who pays when the numbers are fake. A slow, real four hundred plays is worth more than a fast, purchased forty thousand, and not as a matter of principle. As a matter of streaming royalties, artist compliance, and whether the record is still on the platform next spring.