# Someone Else Uploaded My Song

- Link: https://gumm.digital/2026/11/02/someone-else-uploaded-my-song/
- Published: 2026-11-02T00:43:22-08:00
- Author: NuCreative Media LLC

![Original G.U.M.M. catalog-security diagram mapping uploads, matching, claims, 
identity and royalties.](https://gumm.digital/wp-content/uploads/2026/11/gumm-nov-
07-streaming-fraud.png)

Original G.U.M.M. catalog-security diagram for the November 2026 issue.

_A song can go viral while the artist watches from the wrong side of the payout 
screen. The modern independent catalog needs more than distribution. It needs security
habits._

**▶ PRESS PLAY — HEAR THE LEGITIMATE CATALOG:** [Grouper / Liz Harris — official label home at Kranky](https://www.kranky.net/)

## Virality with the wrong owner

In October, Liz Harris—the musician behind Grouper—described discovering that a 
fraudulent upload of her 2008 song “Poison Tree” had accumulated tens of millions
of streams while someone else collected the money. Harris and her label ultimately
recovered the royalties, but the case is disturbing precisely because it was not
a theoretical cybersecurity scenario. A real recording, by a real artist, had developed
a new audience while the economic identity attached to it was wrong. That is a nightmare
version of discovery. Independent artists are often told that the hard part is getting
heard. But digital distribution created a second problem: a recording can circulate
widely while metadata, ownership or uploader identity are incorrect enough to divert
attention and revenue.

> **PULL QUOTE:** A song can go viral while the money walks in the opposite direction.

## Metadata is part of the security system

Artists tend to think of metadata as paperwork that happens after the creative work
is finished. That is increasingly dangerous. Keep a clean record of the final master,
release date, ISRC, UPC, distributor, songwriters, producers, publisher information,
splits, artwork and the email/account through which the release was delivered. Save
invoices and distributor confirmations. Store more than one copy. Those records 
do not magically stop fraud, but they help establish a paper trail quickly when 
something looks wrong. The other habit is monitoring. Search your artist name and
important song titles periodically across the major platforms. Look for duplicate
artist profiles, alternate spellings, strange remixes, unexplained compilations 
and tracks you did not authorize. Catalog administration has become a form of revenue
protection.

**G.U.M.M. TAKEAWAY:** If you only inspect your catalog on release day, you are 
treating a living asset like a disposable post.

## If your music appears without permission

**1. Document before you argue.** Save URLs, screenshots, profile names, dates and
any visible credits. **2. Check your own distribution chain.** Confirm that a collaborator,
old distributor, label, administrator or licensing partner did not create the version
legitimately. **3. Gather ownership evidence.** Master files, dated sessions, distribution
records, contracts, registrations and metadata can help demonstrate the legitimate
chain. **4. Use the platform’s formal process.** Spotify provides a route specifically
for music uploaded without permission and a broader intellectual-property process.
Apple has an infringement form for iTunes and Apple Music. YouTube allows copyright
owners or authorized representatives to submit removal requests through Studio or
its legal process. **5. Notify the distributor or label.** A takedown is only one
part of the problem. Revenue accounting, duplicate profiles and future re-uploads
may require follow-through. **6. Get professional advice when the stakes are large.**
A platform form is not a substitute for legal counsel when ownership is disputed
or substantial money is involved. This is practical information, not legal advice.

## Protect the boring things

The most frustrating lesson is how unglamorous catalog protection looks. Folder 
names. Registration numbers. Spreadsheets. Password hygiene. Contracts. Backups.
Screenshots. But independent ownership means owning the boring responsibilities 
too. Thanksgiving gives us a useful way to think about it: if a song is something
you hope to pass forward—to family, collaborators, an estate or simply the next 
listener—then somebody needs to know where the real version lives and who has the
right to move it. The archive is not secure because the song is famous. It is secure
because the paperwork can find the music.

**CTA:** Before you release another song, audit the last ten.

### Resources

 * [The Guardian — Liz Harris on virality and streaming scammers](https://www.theguardian.com/music/2026/oct/02/grouper-liz-harris-tour-helen-band-lindas-head-interview)
 * [Spotify — Reporting music uploaded without permission](https://support.spotify.com/cm-en/artists/article/reporting-music-uploaded-without-your-permission/)
 * [Spotify — Intellectual Property Policy](https://www.spotify.com/us/legal/intellectual-property-policy/)
 * [Apple — Copyright infringement claims](https://www.apple.com/legal/contact/copyright-infringement.html)
 * [YouTube — Submit a copyright removal request](https://support.google.com/youtube/answer/2807622)

[← Previous story](https://gumm.digital/2026/11/01/when-your-artist-name-becomes-an-asset-and-a-liability-ovrkast/)
[Back to November issue](https://gumm.digital/issue/november-2026/)

Show Somebody: