Kumi Tanioka wrote the music for Final Fantasy Crystal Chronicles. She also worked on Final Fantasy 11, Hyrule Warriors: Age of Calamity, and more recently Yoshi and the Mysterious Book. Last week she had to go public and say that an album sitting on her Spotify artist page, credited to her, very likely generated by AI, was not hers.

That is a strange sentence to have to write about a working professional in 2026. It should not be possible for a stranger to add work to your catalogue and have you find out from fans.

The upload path is the hole

Spotify does not really have a submissions desk. Music arrives through distributors, and distributors take metadata mostly on trust. Supply an artist name, match it to an existing profile, and the tracks land on that profile. The system was built for volume and speed, back when uploading an album still cost real money and real effort. Generative tools removed both. A person with a text prompt and a twenty-dollar distribution account can now fill someone’s page in an afternoon.

The response, when the artist notices, is a takedown request. Which puts the entire burden of policing a catalogue on the one person with no access to it. Tanioka’s only lever here was a public statement.

I don’t think this needs an AI detector, and I’m skeptical of anyone selling one. It needs boring plumbing. Treat the artist page as belonging to the artist. Hold new releases from a distributor that has never delivered to that profile before until the verified account approves them. Bands change labels a few times a decade; the friction is negligible and the failure mode it prevents is exactly this.

Game composers are unusually exposed

Video game music sits in a gap that makes fraud easy. Rights are scattered across publishers, in-house labels, and one-off licensing deals. Composers move between contract work and independent releases. Catalogues surface in fragments, often years late, sometimes from labels the composer has no relationship with. A fan seeing an unfamiliar Tanioka album appear has no reason to assume anything is wrong. Surprise back-catalogue drops are normal in this corner of music.

The genre also happens to be one that current models imitate cheaply. Crystal Chronicles has a recognisable palette, and a lot of ambient loop-friendly instrumental work is close to the median of what these systems already produce well. It clears the low bar of passive listening, which is the only bar that matters for streaming payouts.

So the incentive is simple. Attach synthetic tracks to a name with an audience, collect fractions of a cent from anyone who leaves it playing, and wait to see whether the artist notices. Tanioka noticed. Her name carries enough weight that two outlets picked it up the same week.

What I want to know is how much money the uploader collected before she did, and where that money goes now.