Case Files

Watermarked Tracks: How Labels Hunt Leakers

Start here: How to Find Out Who Leaked Your Secret →

A pre-release album arrives at a journalist's desk in the form of a streaming link, a download code, or — in an earlier era — a physical CD. The journalist is the 47th person to receive a copy that week. The label knows who received it, when, and in some cases, which copy is theirs.

When the album appears on a leak site three days before its release date, the label already knows how to start looking.

How Do Promo Copies Work?

Labels send individualized copies to each recipient — each one marked with a unique identifier — so that any copy that leaks can be traced back to the specific person who received it. The watermark survives re-encoding and format conversion. When the label finds the leaked file, the watermark names the source.

Record labels send advance copies of upcoming albums to journalists, critics, bloggers, and radio programmers — anyone whose review or airplay might build momentum before street date. The recipients are trusted, in principle, but trust doesn't scale. A major release might go to hundreds of recipients across dozens of countries.

Most major labels now individualize physical promo CDs with unique codes embedded in the audio — sometimes described as analogous to a vehicle identification number on a car. If the album appears on the internet, the files can be traced back to the specific copy that was duplicated, which identifies the specific recipient who held that copy.

For digital promos, individualized streaming links or download codes accomplish the same thing. Each link generates a unique audio file with a watermark tied to the recipient's account. The watermark is inaudible but survives re-encoding, compression, and format conversion — the same forensic watermarking technology used by Hollywood studios for screener distribution.

When the leak happens, the label pulls the watermark from the leaked files and cross-references it against the distribution log. The list of suspects narrows to one.

The Beyoncé tracklist case

In 2014, a supposed leaked tracklist for a Beyoncé album circulated online. The list included song titles that seemed plausible given her catalog and the timing of the alleged release.

Lee Anne Callahan-Longo, general manager of Beyoncé's Parkwood Entertainment, confirmed to Billboard that the tracklist was "completely made up."

At least two of the song titles — "Donk" and "Cherry" — had been registered under Beyoncé's name on ASCAP's website, which added credibility to the fake list and generated significant coverage. The ASCAP registrations turned out to be unrelated to any track on any actual release.

Whether the fake tracklist was a deliberate disinformation tactic to catch the source of earlier real leaks, or simply a fan fabrication that spread because the ASCAP data seemed to confirm it, is not established from public sources. What is confirmed: the specific tracklist was false.

It is also reported that some labels have at times deliberately circulated false or partial tracklists to create publicity or test distribution channels. This practice — fake information released to a defined group, traceable if it surfaces — is functionally identical to a canary trap, though the intent is sometimes commercial rather than investigative.

Taylor Swift, "Mine," and the accidental early release

In 2010, a pre-release copy of Taylor Swift's single "Mine" appeared online approximately two weeks before its intended release date. The leak was described as unintentional — a result of unauthorized access to stored audio files rather than a deliberate disclosure by a recipient.

Swift's label responded by moving the official release date forward by about 12 days, making the track available for purchase earlier than planned to minimize the commercial damage from the leak circulating for free.

This case illustrates the standard playbook when a single leaks before a watermark can fully close the investigation: if the leak has already spread, speed of official release can limit the damage. The investigative and commercial responses to a leak run in parallel.

The journalists who didn't

Journalists who receive promo copies sign or agree to embargo and non-disclosure terms as a condition of access. Leaking a promo is a career-ending move: it terminates access to future previews from that label and potentially all labels, and may trigger legal action under the NDA.

According to reporting on the industry's anti-piracy practices, journalists rarely leak music directly to the public intentionally, because the professional consequences are immediate and severe — the information hygiene discipline that journalists develop around sources and embargoes makes accidental disclosure unusual in that profession. Leaks attributed to journalists more often originate from people they shared the music with — friends, family, partners — who didn't share the professional understanding of what was at stake.

This is the structural vulnerability in any canary trap: the person who received the marked copy may not be the person who disclosed it. They may have shared it with someone else in good faith. That ambiguity is part of why the ethics of the method are worth thinking through before you use it: the watermark — or the variant detail — identifies the initial recipient, not necessarily the person who intended to leak.

The app

Same trick, in your pocket. Tell each friend a slightly different version — Gossip Finder tells you which one came back.

After the leak: the DMCA response

When a track or album surfaces on leak sites or social platforms, labels respond with DMCA takedown notices — the standard legal mechanism for requesting removal of copyrighted content. Takedowns go to hosting services, social media platforms, and any site caching the files.

The takedown response runs alongside the leak investigation, which continues in parallel. The DMCA process doesn't require knowing who leaked; it requires knowing what was leaked and who is hosting it. The investigation requires knowing which copy was used, which identifies the recipient, which narrows the suspect list.

Legal consequences have followed confirmed identifications. Recording engineers and producers who sign non-disclosure agreements before working on an album can face breach-of-contract claims. In cases where access to stored files involved unauthorized access to computer systems, criminal investigations have opened separately from civil litigation.

The structure

Music industry promo watermarking is the audio equivalent of Hollywood's screener system and the corporate email coding described by Musk. In each case, the outgoing copy is marked with an identifier specific to the recipient. When the content reappears in the wrong place, the identifier survives and makes the match.

The content is identical to every recipient. The mark is unique to each one. The mark is the canary — and you can run the same method yourself without forensic audio equipment.

The part about your group chat

No label is sending you watermarked promo files about your friend group's plans. What you're working with is language — a specific detail that varies by recipient. The logic is identical. A unique element per person, specific enough to recognize when repeated, invisible to anyone who doesn't know to look.

If one version of your secret comes back, that version identifies its carrier. Gossip Finder keeps the records — which version you planted with which contact — so the match is automatic.


Sources


Scope of use: Gossip Finder is built for your personal social life — friends and family, using information you yourself chose to share. The corporate and institutional examples on this blog are historical case studies. They are not guides for workplace monitoring, employee investigation, legal evidence gathering, surveilling a romantic partner, or accessing any device or account you don't own. For the full ethical framework, see Is It Fair to Set a Trap for a Friend?.

Privacy: Gossip Finder collects no user data. There is no server. All information stays on your device.

Case nº 002 — the tip-off list

Gossip Finder is coming to iOS and Android. Leave your email and we'll tell you the day it launches.

Read more

Case nº 002 — the tip-off list

Get a notification when the app launches.

Leave your email and we'll tell you the day Gossip Finder lands on the App Store and Google Play. One email, then silence — no newsletter, no sharing.