News · 2026-10-12

AI-generated songs helped a bot network divert over $8 million in royalties

Michael Smith was sentenced to 18 months in prison for a bot-streaming operation that used a large AI-generated music catalog to fraudulently collect more than $8 million in royalties. The Justice Department says spreading fake plays across many tracks helped conceal the activity. Announced October 6 and recirculating in today’s feed, the case shows how generative AI can amplify organized platform abuse.

Key facts

• The court ordered forfeiture of $8,091,843.64 alongside the prison sentence and two years of supervised release.
• The Justice Department announced sentencing October 6, rather than October 12.
• Prosecutors say the operation used as many as 10,000 bot accounts at once.
• The primary source is the Southern District of New York’s sentencing release.

The critical deception was a manufactured audience. Streaming platforms distribute royalty money based in part on listening activity. When software impersonates listeners and generates plays for a catalog controlled by the operator, it can redirect money from genuine listening into payments for fabricated demand. Creating synthetic music supplies material for that mechanism; it does not by itself constitute the fraud.

The Justice Department’s account describes a scheme running from 2017 to 2024. Smith created fraudulent streaming accounts, used software to make them repeatedly play songs he controlled and collected royalties from the resulting activity. The dossier records hundreds of thousands of AI-generated tracks and billions of bot plays. These are prosecutors’ descriptions of the case, grounded in their release about court proceedings.

The role of the catalog is particularly important. A single track with an implausible flood of plays can be conspicuous. A much larger set of tracks gives an operator more places to distribute the same false activity. In an email quoted by the Justice Department, Smith said he needed “a TON of songs fast.” The quote identifies why rapid content generation mattered to this particular abuse pattern.

Think of a rewards program that gives businesses credit for customer visits. A fraudster could invent customers, automate their check-ins and spread them over many storefronts. Generative AI makes it easier to supply the storefronts’ apparent inventory. The damage still arises from fabricated visits and stolen rewards, not from whether the inventory is aesthetically convincing.

That is a real AI-cyber connection. The system combines automated accounts, deceptive interaction with online services and evasion of anomaly detection. It attacks the integrity of platform activity and payment allocation rather than exploiting a memory bug or stealing model weights. The cybersecurity lesson is about abuse of a working system’s incentives and signals.

The court outcome also makes this a stronger accountability story than an unverified social-media allegation. The sentence, supervised release and forfeiture are stated in the official release. The story should retain that precise event date. A newly popular link is a distribution event, not a new conviction or sentence. Readers deserve to know which clock an article is using.

The implications for defensive systems follow from the documented mechanism. Counting unusual activity on an individual track may miss coordinated behavior spread across a large catalog. A broader investigation may need to connect accounts, repeated behaviors and payment destinations. Those are analytical implications, not claims that the dossier establishes a particular platform’s detection rules or proves a named defense would have stopped the operation.

This is also different from determining whether listeners like AI music. Deezer’s Ipsos survey examines recognition and stated preferences, including demand for clear labeling. It does not test whether a play came from a genuine listener. A labeled synthetic song can have a real audience; an unlabeled human recording can also be targeted by fake streams. Provenance and audience authenticity are separate checks.

Ground Truth’s earlier story on Tidal’s treatment of fully AI-generated music supplies related policy context. Labeling, payout rules, rights and anti-fraud enforcement all affect the same market, but they should not be collapsed into a single question of whether a song sounds human. The lesson on content provenance explains the limits of knowing how an artifact was produced.

The honest caveat is that this is one prosecuted operation. It does not establish the prevalence of AI-enabled streaming fraud, the total loss across the industry or the effectiveness of every service’s controls. The official terminology also does not independently establish a model capability level. What it does establish is a concrete abuse pattern: cheap catalog generation supported scalable false engagement. For security teams, the consequential question is whether their defenses evaluate the authenticity of coordinated activity as carefully as the apparent quality of the content generating that activity.

Primary source, verified: read the paper →

Ground Truth. (2026, October 12). AI-generated songs helped a bot network divert over $8 million in royalties. Ground Truth. https://groundtruth.day/news/ai-music-bot-fraud-smith-sentencing.html

@misc{groundtruth:ai-music-bot-fraud-smith-sentencing,
  title  = {AI-generated songs helped a bot network divert over $8 million in royalties},
  author = {{Ground Truth}},
  year   = {2026},
  month  = {oct},
  url    = {https://groundtruth.day/news/ai-music-bot-fraud-smith-sentencing.html}
}

Topics: cybersecurity · ai-security · bot-abuse · cybercrime · fraud · music