Leaks, stolen uploads and fake profiles: how to get your music taken down from DSPs and YouTube

Picture the message: a fan sends a link. The track is on Spotify under a stranger's name, or a voice that sounds like yours is singing words you never wrote on YouTube. The instinct is to email every platform at once. That is rarely the fastest option.

Each problem has its own route, and the copyright routes are all built around one US law. This guide covers what that law requires, how Spotify, Apple and YouTube take reports, and where the process works against you. It is not legal advice.

First, name the problem

• Someone uploaded your recording or song. This is copyright: a takedown notice.
• Your music is on someone else's profile, or theirs is on yours. Spotify treats this as a mix-up, not theft, and it has a faster fix.
• A fake channel or a cloned voice. That is impersonation or likeness, which platforms handle under their own policies, not copyright.
• Someone claims your own track through Content ID. You dispute the claim. You don't send a notice.

What a takedown notice needs

Section 512 of the US Copyright Act gives platforms a "safe harbor" from paying damages for what their users upload, provided they remove infringing material quickly once notified. The Copyright Office's guide lists six things a notice must substantially contain:

• your signature;
• the work that was infringed;
• the infringing material, and enough detail to find it;
• your contact details;
• a statement of good-faith belief that the use isn't authorised;
• a statement, under penalty of perjury, that the notice is accurate and that you are authorised to act for the copyright owner.

The same page answers the questions artists usually ask. You don't need a copyright registration to send a notice, though a US work must be registered before you can sue. You don't need a lawyer. Send the notice to the platform's registered agent, which you can look up in the Office's DMCA Designated Agent directory, or use the platform's own form, which may be processed faster.

Two warnings, also from the Office. If you knowingly misrepresent that something infringes, you can be liable for the uploader's damages, costs and attorneys' fees. And platforms are never obliged to comply; they choose to, in exchange for the safe harbor. If the uploader sends a counter-notice, the platform restores the material after 10 to 14 business days unless you tell it you have filed a court action. Where a lawsuit is out of proportion to the harm, see our guide to the Copyright Claims Board.

Spotify

For an unauthorised upload, Spotify's artist support page sends you to an infringement claim. Its intellectual property policy asks for much the same information as the statute and accepts claims by web form or at infringement-claim@spotify.com. Spotify warns that it may pass your name and email to the uploader. It may remove the track everywhere or only in particular countries, and appeal instructions arrive by email.

If the music is on the wrong profile, use the content mismatch form in Spotify for Artists. Spotify says fixes usually take a few days and that you can report releases before they go live. If you deliver through one of Spotify's preferred or recommended distributors, your distributor can correct the mix-up and deliver future releases with your artist ID attached. A cloned voice is a third route: the legal form, with "Publicity / Likeness" selected. Our Sony deepfakes piece covers that route and Artist Profile Protection in more depth.

Apple Music

Apple runs a separate dispute form for each service, so use the iTunes and Apple Music one. The music form takes up to 50 albums or tracks per dispute and asks which territories you hold rights in. It also tells you that your name and email will be supplied to whoever provided the content. Apple usually replies with a reference number, and every follow-up should be an email with that number in the subject line, not a new form. Apple's DMCA page says claims about its services take longer without the right form.

YouTube

On YouTube a removal request is filed in YouTube Studio under Content detection, or by email to copyright@youtube.com. A few options matter:

• Scheduled removal. The request can take effect in 7 days, giving the uploader time to act and avoid a copyright strike. Use it for well-meaning fans.
• Prevent copies. If you file in Studio, you can block re-uploads of the same content.
• Scope. Each request covers one allegation. You can't remove a whole channel or playlist.
• Privacy. Your name replaces the removed video, and your full legal name and email may be shared with the uploader. An authorised representative, such as a lawyer, can file instead.

The Copyright Match Tool finds videos that match yours, and after a successful removal it looks for other videos with matching audio. It won't catch videos that use only part of your song.

Content ID is harder to get. YouTube grants it on exclusive rights and "demonstrated need", and lists unlicensed music, and music licensed without exclusivity, as common examples of material that may not be exclusive. If someone else's Content ID claim lands on your own upload, dispute it. The claimant has 30 days to respond and can release the claim, reinstate it, file a removal request (if valid, the video comes down and you get a strike), or let it expire. YouTube says it can't make ownership decisions, so the claimant reviews both the dispute and any appeal. If a removal request follows, a counter notification gives the claimant 10 US business days to show legal action. To file one, you have to agree to the jurisdiction of a US federal court.

For fakes, YouTube's impersonation policy bans channels that copy your branding, add "Official" or "Backup" to your name, or use your AI-generated voice to suggest you are behind them. Report those channels directly. For a realistic AI version of your voice or face, the privacy complaint process weighs whether the content is labelled, realistic, identifiable, or a parody.

What we think

Notice-and-takedown was built to protect platforms, and that shows in who carries the cost. The safe harbor rewards a platform for acting once you have done the finding, the filing and the sworn statement. For a solo artist, that is all unpaid admin.

The Content ID setup worries us most. Read together, YouTube's pages say that the party claiming your song reviews your dispute, and that pushing back means agreeing to a US court's jurisdiction and handing over your name and address. When the claimant is a legitimate label, that is reasonable. When the claimant is someone who distributed your song as their own, the person who stole it is the one reviewing your dispute. The 30-day and 7-day clocks also favour whoever is holding the claim.

The routes that work best for artists are the ones that happen before anything goes live: Spotify's pre-release mismatch reports, and delivering with an artist ID. Platforms should take this further. A verified artist should be able to lock their catalogue so that a stranger can't deliver or claim against it without a check. Until then, the burden of proof falls on the person who was robbed.

Step by step: when you find a stolen upload or a fake

1. Capture it. Screenshot it and save the direct URLs, the uploader's name and the date.
2. Name the problem using the list above: copyright, mix-up, impersonation or a false claim.
3. Check who owns what. If a label or publisher controls the recording or song, they file, or they authorise you in writing.
4. Use each platform's own form, and tell your distributor.
5. On YouTube, consider a scheduled 7-day removal for fan uploads, and turn on "prevent copies".
6. Protect your details. If you don't want a stranger to have your name and email, use a representative.
7. Log every reference number and note the 10 to 14 business-day counter-notice window.
8. Don't overreach. Fair use and parody exist, and false notices carry liability.
9. Escalate to the Copyright Claims Board or a lawyer only if the upload keeps coming back.