Royalty Theft 2026: Stop Someone Claiming Your Songs

Here's a scenario that used to sound paranoid and now shows up in the trade press every few weeks: you log into YouTube Studio and find a Content ID claim on your own video. Or you pull your MLC data and see a "remix" of your song, credited to a writer you've never heard of, collecting 100% of the mechanicals. Or a stranger's upload appears on your Spotify artist profile, singing your songs in a voice that sounds a lot like yours.

That's royalty theft. In 2026 it isn't rare and it isn't only a superstar problem. The systems that move music money (Content ID, the MLC's matching engine, distributor upload pipelines) mostly run on a simple rule: whoever registers first, with clean-looking metadata, tends to get paid first. Bad actors know that. Most indie artists don't.

This guide covers how royalty theft actually works, the warning signs to watch for, and a step-by-step playbook for getting your money back and keeping it from walking off again.

What Royalty Theft Looks Like in 2026

"Royalty theft" covers several different schemes, and they hit different revenue streams. The fix depends on which one you're dealing with, so it helps to know the main types.

1. False Content ID claims

Someone uploads your recording (or a slightly altered copy of it) through a distributor or rights-management service that has Content ID access. YouTube's system then treats them as the owner and either diverts the ad revenue from every video using that audio or "shares" revenue on your own uploads.

This is the oldest and best-documented version. In 2021, federal prosecutors in Arizona indicted two men tied to a company called MediaMuv, alleging they claimed more than 50,000 songs they didn't own through a Content ID administrator and collected over $20 million in YouTube royalties, partly with forged documents. A lot of the victims were Latin artists who had no idea the money existed.

The 2026 version got stranger. In April, Music Business Worldwide and The Verge reported on Murphy Campbell, a North Carolina folk singer who first found AI-generated covers of her songs posted to her Spotify profile. Then hidden YouTube uploads, sent in through a distributor, were used to file Content ID claims against her real videos. The songs themselves were traditional Appalachian tunes in the public domain, but her recordings were hers. The distributor released the claims and banned the uploader once the story went public. Most indie artists don't get a Rolling Stone article to speed that up.

2. Duplicate or "remix" registrations at the MLC and PROs

Someone registers a "new" musical work at the MLC or a PRO that's really your song: a "B Mix," an "Extended Version," or the same title under a different writer name. Then they link it to the ISRCs of the real recordings. If the matching engine accepts that link, mechanical royalties flow to the fake work.

A September 2025 Digital Music News investigation documented exactly this. A work called "24K Magic (B Mix)" was registered through a publishing administrator, claimed 100% of over 100 recordings, and was matched across a dozen-plus DSPs before the MLC pulled it. The MLC confirmed royalties had been diverted (it called the amount "very small"). BMI said it had flagged the same work as an unauthorized remix more than a year earlier. A researcher quoted in the piece had catalogued 400+ suspicious works with similar patterns.

If a Bruno Mars hit can be skimmed this way, a self-released song with 40,000 streams is an easier target. Nobody at a major publisher is watching yours.

3. Profile hijacks and impersonation uploads

Someone delivers tracks to DSPs under your artist name, or onto your existing artist profile, through a distributor. Sometimes it's AI-generated "new music" in your style. Sometimes it's re-uploads of your actual catalog with new ISRCs. Those streams pay whoever delivered them, and they muddy your metadata, which causes matching problems later.

4. Streaming fraud that dilutes the pool

This one doesn't target you by name, but it costs you. Bot farms stream fake (often AI-generated) tracks to pull money out of the shared royalty pool. In the biggest US case, North Carolina musician Michael Smith pleaded guilty in March 2026 to a scheme that, according to federal filings, used bots to stream AI-generated tracks and pull in roughly $10 million in royalties. He was sentenced in October. Every fraudulent stream takes a slice of the pool that would otherwise be split among real artists and songwriters.

5. Plain old metadata "accidents"

Not every wrong claim is malicious. Labels, admins, and co-writers' publishers overclaim all the time, through sloppy split entry, copy-pasted ownership percentages, or a producer's admin claiming 100% of a work they co-wrote. The fix process is often the same as for fraud, but the tone of your outreach should be different. (We covered the friendly-fire version in our MLC overclaim guide.)

Why the System Makes This So Easy

It's worth being blunt about this, because it isn't your fault.

• First-to-register advantage. Content ID and DSP matching systems reward whoever delivers reference files and ownership data first. If you never opted into Content ID through your distributor, your recording may not be in the reference database at all, so a bad actor who uploads it becomes the "original."
• Matching runs on metadata, not proof. The MLC, PROs, and Content ID mostly check that registrations are consistent, not that they're true. A clean-looking registration with a plausible writer name and valid IPI numbers can sail through.
• Distributors have thin KYC. Plenty of distributors and "rights management" services let almost anyone upload and opt into monetization. Some are strict. Others aren't.
• Nobody is watching small catalogs. Major publishers run monitoring teams. Indie writers have… themselves, at 1 a.m., when they remember to check.
• AI made impersonation cheap. Voice clones and style-matched tracks used to take real effort. Now they don't, so the volume of junk uploads keeps climbing.

Regulators are starting to pay attention. On October 7, 2026, the U.S. Copyright Office published a Notice of Inquiry on music streaming fraud (Docket No. 2026-6), asking how fraud is carried out, what it costs creators, how AI plays into it, and whether shared databases could help. Initial comments are due about 45 days after publication, roughly late November 2026, with reply comments about a month after that. Check copyright.gov/policy/music-streaming-fraud for the exact deadlines. Independent creators are exactly the voices the Office needs to hear from. If you've been hit, consider filing a comment.

Warning Signs Someone Is Claiming Your Songs

Most royalty theft is found by accident. Here's how to find it on purpose.

That last row matters most. Theft usually shows up first as a gap between usage and income. If your Spotify for Artists shows a song doing 15,000 streams a month and your MLC mechanicals on that work dropped to nearly nothing, something is matching that usage to somebody else.

Quick monthly check (20 minutes)

1. Search every one of your song titles in MLC Public Search. Look for duplicates and unfamiliar writers.
2. Search your legal name and your artist name in your PRO's repertoire database.
3. Open YouTube Studio's Copyright section and scan for new claims.
4. Check your DSP profiles for releases you didn't deliver.
5. Compare this month's streams per track against this month's mechanicals per work. Flag anything that moved in opposite directions.

Doing that by hand across 30, 80, or 200 songs is exactly the tedious cross-referencing most people skip. It's a big part of why we built RoyaltyCoPilot.ai. It compares your catalog against MLC, SoundExchange, and PRO data and flags the mismatches, so the duplicate registrations and suspicious claims stand out instead of hiding in a spreadsheet.

How to Get Your Royalties Back: Step by Step

You found something. Don't panic, and don't fire off angry DMs yet. Work through this in order.

Step 1: Document everything before you touch it

Screenshot the claim, the duplicate registration, or the impostor release, with dates, URLs, claimant names, work IDs, ISRCs, and any revenue figures you can see. Bad actors sometimes yank things once they're noticed, and you want a record of how much was diverted and for how long.

Gather your proof of ownership too:

• Original session files, stems, or DAW project files with timestamps
• Your distributor's release confirmation and original ISRC assignments
• Split sheets and co-writer agreements
• Your PRO and MLC registration confirmations
• Copyright registration certificates, if you have them (this is where filing pays off)

Step 2: Dispute Content ID claims, and don't let the deadline lapse

In YouTube Studio, open the claim and choose Dispute. Pick the reason that fits (usually that you own the content or have a license) and explain plainly: you're the original artist, the claimant has no rights, and here's your release date and distributor. The claimant typically has 30 days to respond. If they reinstate a bad claim, you can appeal, which pushes them to either release it or file a formal copyright takedown, and a fraudster usually won't want their legal name on that.

Also contact the distributor or rights service behind the claim. YouTube shows the claimant's name, and that's often a distributor's sub-account. Distributors have terms against fraudulent uploads, and they can release all of a bad actor's claims at once and ban the account, which is what happened in the Campbell case.

Step 3: Challenge bad MLC registrations

If someone registered a duplicate work or claimed shares they don't own:

• Register or fix your own work first. If your song isn't properly registered at the MLC (or through your admin), do that right away with accurate writers, IPIs, shares, and ISWC if you have one.
• Use the MLC's dispute and overclaim tools in the Member Portal to flag the conflict. Once a work is in dispute, the MLC generally holds the disputed royalties instead of paying them out, which keeps the money from leaving while it gets sorted.
• Contact MLC support directly with your documentation if it looks like fraud rather than a mistake. Say "fraudulent registration" explicitly. Those reports get treated differently from routine share conflicts.

Step 4: Clear up PRO duplicates

Contact your PRO's writer or publisher services team with the duplicate work ID and your proof. BMI and ASCAP both have processes for conflicting registrations and suspected fraud, and they can place holds on payments. If you're registered through a publishing administrator, have them file it, since they have direct lines into the PROs' registration teams.

Step 5: Take down impostor releases

For uploads on your DSP profile you didn't deliver:

• Report through Spotify for Artists ("Report content on my profile"), Apple Music for Artists, and the other DSPs' artist tools.
• Ask your distributor to file a profile-mismatch or takedown request. They have faster channels into DSPs than you do.
• If the release came through an identifiable distributor, report the account there as well.

Step 6: Escalate if the money is real

If a meaningful amount has been diverted (thousands, not tens of dollars), talk to a music attorney. Some cases justify a formal demand, a copyright infringement claim, or a referral to law enforcement. The MediaMuv case started because people kept escalating.

How to Make Your Catalog Harder to Steal

Prevention costs less than recovery. These steps close most of the gaps bad actors use.

Get your recordings into Content ID yourself

If your distributor offers YouTube Content ID (many do, sometimes as an add-on), consider opting in for recordings you fully own. Having your reference file in the system first is the best defense against someone else claiming your audio. One big caveat: don't opt in tracks built on leased beats or uncleared samples. Content ID will flag other licensees' videos, and many beat leases forbid it outright. (More on that in our YouTube royalties guide.)

Register everywhere, completely and consistently

Fraudsters do well in the gaps. Every song should have:

• A PRO registration with correct writers, shares, and IPI numbers
• An MLC registration (directly or through your admin) with matching data
• SoundExchange repertoire registered on both the rights-owner and featured-artist sides
• A consistent ISRC for each recording, and an ISWC for each composition where possible

When the real, complete registration already exists, a fake duplicate is much more likely to trip a conflict instead of matching cleanly.

Use the same names everywhere

Your legal name, your writer name, and your artist name should appear the same way across your PRO, the MLC, your distributor, and your split sheets. Inconsistent spellings create unmatched royalties, and unmatched royalties are where opportunists go fishing.

Consider registering copyrights for your most valuable songs

U.S. Copyright Office registration doesn't stop someone from filing a fake claim, but it gives you the strongest proof of ownership and lets you pursue statutory damages and attorney's fees if you have to go to court. For your top earners, the filing fee is cheap insurance.

Lock down your accounts

Turn on two-factor authentication for your distributor, PRO portal, MLC account, SoundExchange, and YouTube. Some "royalty theft" is just account takeover: someone gets into your distributor login and changes the payout details. Check your payout details every few months.

Monitor on a schedule, not on a hunch

The best defense is noticing fast. Diverted royalties are much easier to recover when you catch them in month two instead of year three. Payment holds, disputes, and distributor bans all work better on money that hasn't been paid out and spent yet.

Who's Responsible for Catching This? (Spoiler: Mostly You)

It's fair to ask why the burden falls on independent creators. The MLC works with outside fraud-detection vendors and screens registrations. Spotify and other DSPs have removed tens of millions of junk tracks. YouTube says most claims are valid. The Copyright Office is now formally studying the problem.

All of that helps, and none of it is aimed at protecting your 40 songs specifically. Platform fraud detection looks for patterns at scale, like bot streams or mass uploads. A single duplicate registration of your mid-tier song can easily stay under the radar for years.

So in practice the person most motivated to catch theft of your catalog is you, ideally with tools that make the checking quick. That's where RoyaltyCoPilot.ai fits. It doesn't replace your PRO, the MLC, or your distributor. It keeps an eye on the data they all hold and tells you when something about your catalog doesn't add up.

The Bottom Line

Royalty theft in 2026 runs on the same weaknesses that cause ordinary unclaimed royalties: incomplete registrations, inconsistent metadata, and nobody checking. Fraudsters exploit those gaps on purpose, but closing them protects you from both theft and honest mistakes.

Here's the short version:

1. Look monthly. Check YouTube claims, MLC and PRO repertoire, and your DSP profiles for anything you didn't create.
2. Watch for usage-vs-income gaps. Rising streams with falling royalties is the clearest sign.
3. Document before you dispute. Screenshots, dates, IDs, and proof of ownership.
4. Dispute through the official channels. YouTube disputes, MLC conflicts, PRO duplicate reports, and distributor fraud reports, and put disputed money on hold.
5. Close the gaps. Complete registrations, consistent names, Content ID for masters you fully own, 2FA everywhere.

If you want to see where your catalog stands right now, including any registrations that look like they shouldn't be there, run a free catalog audit at RoyaltyCoPilot.ai. It takes a few minutes, and it'll show you what's matched, what's missing, and what needs a closer look.

This article is for educational purposes and isn't legal advice. If you believe a significant amount of royalties has been stolen, consult a qualified music attorney.