Skip to main content
Dark green background, "Weak Application Security Can Cost You Millions," 3 slanted images of fingers pointing to digital locks, and a "Learn the Basics" button
IncidentPeople used AI as a toolSeverity M: moderate, 3/5Reported: press reporting only

Fraudsters uploaded apparently AI-made fake songs to singer Gemma Hayes's Spotify, Apple Music and YouTube profiles

Fraudsters added three tracks falsely presented as new releases by singer-songwriter Gemma Hayes to her Spotify, Apple Music and YouTube profiles. The songs are likely made by AI bots, and Hayes says they appear to come from an Indonesian entity credited as Composer & Lyricist, which would typically collect the bulk of royalties. Fans received notifications about the tracks and were confused. Hayes and her management have been unable to get the songs taken down despite contacting each streaming service.

What the AI did

The three fake tracks were likely made by AI bots rather than by real artists, and were then uploaded by fraudsters to Gemma Hayes's profiles as if they were her new releases. It has not been reported which AI tool was used.

First reported October 27, 2026 · Added to the register November 5, 2026 · 1 source

Affected
Gemma Hayes
When it happened
Not stated in the sources
First reported
October 27, 2026

What this means for you

Could this affect you?

Possibly

If you are an artist, label or rights holder with streaming profiles, or you run a streaming or distribution platform. Mid-tier artists and labels whose streaming profiles can receive uploads from others without verification are exposed, along with fans misled into streaming the fake tracks.

What to check

  • Monitor your streaming profiles for releases you did not authorise.
  • Set up takedown contacts with each streaming platform in advance.
  • Verify uploads attributed to existing artist profiles before publishing them.
  • Remove content impersonating an artist quickly once reported.
Every fact and its source (6)
  1. Platforms where fake music appearedSpotify, Apple Music, YouTube
    “added music purporting to be written by the award-winning singer-songwriter to her Spotify, Apple Music and YouTube accounts”[1]
  2. Fake tracksTaxi to Piccadilly; Champagne and Cheap Perfume; Melancholy in Stereo
    “Taxi to Piccadilly; Champagne and Cheap Perfume; and Melancholy in Stereo”[1]
  3. Suspected sourceIndonesian entity credited as Composer & Lyricist
    “appear to be coming from an Indonesian entity, credited as Composer & Lyricist”[1]
  4. How the songs were madeLikely made by AI bots
    “The likelihood is that the songs appearing on the platforms have not been crafted by actual artists, but by AI bots.”[1]
  5. Royalty diversionBulk of royalties typically go to the credited fraudster
    “The bulk of royalties accruing for downloads will typically go to that person.”[1]
  6. Takedown statusSongs not yet removed despite contacting each platform
    “have been unable to get the three songs taken down despite contacting each of the streaming services separately”[1]

Sources

  1. Gemma Hayes on becoming a victim of AI fraud: 'It feels strange and odd and dangerous' – The Irish Times
    irishtimes.com · October 27, 2026

How this record is classified. Severity M (3/5): harm to individuals, or a policy breach with limited reach. OECD level: incident, an event in which an AI system led to actual harm. Evidence: Reported, meaning press reporting only.

The facts in At a glance and in Every fact and its source are quoted from the sources listed. The summary, What the AI did and What this means for you are written from those sources and checked against them automatically before publication. Records reflect what has been disclosed, not everything that has happened. Incidents are found through news feeds and the GDELT Project.

Promotional banner for the Pentest Readiness checklist download