Safe music promotion and streaming fraud

How to Vet a Music Promotion Company

Bradley J Simons
Bradley J Simons
4x Juno-nominated producer · founder of Velveteen
The short answer

Vet a music-promotion company by verifying its legal identity, people, references, services, subcontractors, traffic sources, media accounts, platform compliance, access, reporting, pricing, and exit terms. Require a written scope for controllable work, not promised streams or Spotify placement. Keep accounts artist-controlled where practical, prohibit undisclosed automation, preserve exports, and define incident cooperation before paying.

Lead visual

Rights live in lanes

01

Composition

writers, publishers, PROs

owner
permission
payment

02

Master

artist, label, recording owner

owner
permission
payment

03

License

use, territory, term, fee

owner
permission
payment
A rights-map image for copyright, covers, publishing, and creator licensing topics.

Promotion · Safety

Rights clearance map

Decision

Know who owns what before the song, cover, sample, or claim goes public.

Evidence

Writers, publishers, master owners, licenses, notices, registrations, and takedown proof.

Risk

A missing clearance or ownership record can block monetization or create a dispute after traction starts.

Good outcome

A defensible rights trail before money, platforms, or third parties are involved.

Part of the Safe music promotion cluster.

Key takeaways

  • Verify the company, people, jurisdiction, references, and recent platform-policy knowledge before reviewing a pitch.
  • Define controllable labor, assets, media, outreach, reporting, and exclusions instead of purchased platform outcomes.
  • Name every account, traffic source, playlist route, subcontractor, data flow, permission, and evidence owner.
  • Treat secrecy, guarantees, credential requests, unverifiable ads, undisclosed networks, and pressure as blocking diligence gaps.
  • Write pause, refund, incident, cooperation, termination, access-removal, record-retention, and final-export terms before launch.

Which fields should a promotion-company review cover?

Provider operating boundary

Twelve diligence fields before payment

Identity

Legal name, registration, jurisdiction, address, domain, owners, team, signatory authority, insurance, tax, and payment recipient.

Connects the offer, contract, invoice, work, and accountable party.

Track record

Recent relevant clients, references, case scope, starting point, methods, evidence, permissions, failures, and current policy knowledge.

Separates demonstrated work from selective outcome claims.

Service

Strategy, creative, ads, PR, outreach, research, reporting, meetings, deliverables, quantities, deadlines, acceptance, and exclusions.

Limits payment to work the provider can control.

Method

Platforms, audiences, targeting, contact process, playlist route, tools, automation, incentives, traffic sources, and prohibited practices.

Shows how exposure is produced without relying on a secret system.

Accounts

Owner, billing, roles, two-step verification, pixels, links, audiences, creative, approvals, logs, exports, and exit access.

Protects campaign evidence and continuity.

Subcontractors

Names, roles, countries, playlist or media relationships, data access, fees, controls, conflicts, and replacement approval.

Prevents core delivery from disappearing behind an unknown network.

Compliance

Spotify and other platform terms, ad policies, privacy, consent, marketing law, intellectual property, claims, age, and territory requirements.

Makes compliance a written operating duty rather than an assumption.

Data

Personal data, audience data, analytics, links, cookies, lawful basis, processors, security, retention, export, deletion, and breach notice.

Prevents campaign access from becoming permanent data exposure.

Reporting

Source systems, delivery, spend, fees, clicks, placements, contacts, versions, dates, filters, raw exports, limits, and meeting cadence.

Makes the work auditable without treating streams as the invoice.

Economics

Service fee, media spend, currency, tax, markup, commissions, affiliate payments, milestones, invoice evidence, refund, and disputed charges.

Shows who is paid for which input and where conflicts may exist.

Incident

Anomaly monitoring, prompt notice, pause authority, evidence preservation, playlist and vendor disclosure, platform cooperation, response owner, and costs.

Creates a response path before suspicious traffic appears.

Exit

Termination trigger, notice, refund, pending work, ad stop, access removal, credentials, assets, reports, records, data deletion, and surviving duties.

Returns control without losing the evidence needed for a later notice.

What is the difference between a service and a prohibited outcome?

Promotion scope boundary
Contractible workReject or rewrite
AdvertisingCreate and run approved ads with named account, audience, creative, budget, placements, tags, reports, and change logPay for exactly 50,000 Spotify streams generated by ads
Public relationsResearch contacts, send approved pitches, follow up, log responses, and deliver coverage evidenceGuarantee ten reviews or a specific publication result
Playlist outreachResearch relevant independent curators and conduct disclosed, policy-compliant outreach with no placement paymentSell guaranteed Spotify playlist slots, stream totals, or a secret playlist network
ContentProduce approved assets, publish on named channels, document rights, and report delivery and audience evidenceGuarantee virality, followers, recommendation priority, or chart movement
StrategyAudit audience, catalogue, positioning, channels, experiments, budgets, risks, and measurement planClaim proprietary access to Spotify editors or the recommendation algorithm

What should a safe scope of work look like?

Worked exampleIllustrative scope

Provider will create six approved short-form assets, run a CAD 1,500 Meta campaign from the artist-owned ad account, target Canada and the United States, and deliver weekly account exports. Provider will not buy streams, pay for Spotify placement, use undisclosed automation, or subcontract playlist promotion. Artist may pause spend immediately. Provider will notify the artist within one business day of unexplained traffic and preserve campaign records for twelve months.

Constructed example, not a real release
from the artist-owned ad account
Keeps spend, targeting, creative, delivery, and change history visible to the artist.
will not buy streams
Turns a general compliance promise into explicit prohibited methods and outcomes.
may pause spend immediately
Assigns containment authority before an anomaly or policy concern appears.
preserve campaign records
Protects the evidence needed for distributor review, accounting, or a later dispute.

This is an issue example, not a complete contract

Jurisdiction, campaign size, privacy, intellectual property, liability, refunds, taxes, workers, subcontractors, and dispute risk can require different language. Use independent qualified counsel for a material agreement.

price media, labor, reporting, and contingency as separate inputs

Which official policies should the provider review with you?

Frequently asked questions

How do I know if a music-promotion company is legitimate?+

Confirm the legal business and named people, check independent references, review prior work, ask for the exact method and traffic source, inspect a real redacted report, identify ad accounts and subcontractors, read current platform policies, and require a contract. Legitimacy is demonstrated through traceable operations and accountable work, not testimonials, follower counts, celebrity logos, urgency, or a guaranteed outcome.

What should a music promoter promise?+

A provider can promise work it controls: campaign planning, creative production, ad setup, approved targeting, public relations outreach, curator research, reporting, meetings, and asset delivery. It should define quantities, dates, accounts, owners, exclusions, and acceptance. It should not promise a stream count, paid Spotify placement, editorial decision, algorithmic recommendation, follower total, chart position, or revenue result.

Is paid playlist pitching legitimate?+

Paying a professional for research and outreach can be distinct from buying placement, but the boundary must be explicit. Spotify says guaranteed playlist placement for money violates its terms and warns artists to be highly skeptical even of paid consideration for user playlists. Require the provider to identify the outreach service, selection method, payment recipients, playlist inventory, editorial independence, and reporting without guaranteeing acceptance.

Should a promoter use my advertising account?+

Artist-controlled accounts are preferable where practical because they preserve spend, targeting, creative, change history, billing, pixels, audiences, and export access. Give role-based least-privilege access instead of passwords, enable two-step verification, approve linked tools, name subcontractors, and define removal. If the provider uses its own account, require delivery-level reports, invoices, targeting, placements, changes, and an export or handoff right.

What should be in a music-promotion contract?+

Include parties, scope, deliverables, exclusions, methods, platforms, territories, accounts, creative, approvals, traffic sources, subcontractors, access, data, security, compliance, reporting, records, fees, media spend, taxes, refunds, change control, incident notice, cooperation, representations, liability, termination, access removal, final exports, and governing terms. Have qualified counsel review material spend, rights, liability, privacy, or cross-border risk.

Bradley J Simons

About the author

Bradley J Simons

Bradley J Simons is a 4x Juno-nominated producer who makes music as Babbage and founded Velveteen. A former touring musician, he writes about releasing, pitching, and getting paid for music from the artist's side of the desk.

Velveteen notes

Get better release strategy in your inbox

Release planning checklists, royalty explainers, and artist strategy notes from Velveteen. No daily noise.

Improve this page

Was this useful? Send a signal or flag a correction.

Keep reading

Free tool · no signup

Put real numbers on your release

Enter a budget and get a recommended split across content, ads, PR, and creative, with warnings on the line items where indie spend usually goes fragile.