In January, folk musician Murphy Campbell opened Spotify and found songs she didn't recognize listed under her name. They were her songs - melodies she'd written, arrangements she'd performed - but the vocals were slightly wrong. She hadn't uploaded any of them.
She'd been cloned.
Someone had pulled her YouTube recordings, fed them into an AI voice cloning tool, and uploaded the results to Spotify under her name. Then, apparently, that same person filed copyright claims - turning Campbell from victim into a target for legal harassment. This is the dual threat becoming more common for independent musicians: AI-generated impersonation followed by copyright trolling, where the person who stole your voice then accuses you of infringement.
The $0 Voice Cloning Pipeline
Voice cloning used to require serious compute resources and technical skill. Now, a dozen consumer tools can replicate a voice from just a few minutes of audio. YouTube has become an open library of training material - anyone who posts covers, originals, or live performances is handing their voice to whoever wants it.
For folk musicians like Campbell who post recordings to build an audience, that tradeoff has inverted. The same videos that grow a fanbase now serve as raw material for impersonation. Spotify's upload infrastructure, designed to make distribution easy for indie artists and distributors, has no reliable way to verify that the person submitting content actually owns what they're uploading.
The copyright trolling angle is what makes this particularly vicious. If someone uploads an AI clone of your voice singing your songs, they can potentially file DMCA takedown claims against the original creator. The legal system isn't built to resolve this quickly or cheaply, especially for an independent musician without label backing.
What Legal Protections Exist
At the federal level in the US, the NO FAKES Act has been proposed but not passed. It would create an explicit legal right over your digital voice and likeness, making this kind of cloning clearly actionable. Several states have passed their own laws, but enforcement varies widely and none provide fast relief.
Spotify has a reporting process for fake or infringing content. The burden falls on the artist to find the violation, document it, and submit the report. For someone like Campbell - managing her career without a team - that's substantial unpaid work on top of the emotional cost of discovering her identity was commercially exploited.
The major labels have been fighting AI cloning through licensing negotiations and coordinated lawsuits. Independent artists get none of that. They're left periodically checking their own profiles for imposters.
Campbell's story isn't exceptional. That's the problem. The tools that enable this are cheap, widely available, and getting easier to use. The gap between "someone could do this" and "someone just did this to me" is narrowing for every musician who posts their voice online.