Bandcamp Has A Spam Problem

I’m always on the hunt for new music and never use music-rental programs like Spotify/Qobuz, which means I spend most of my time surfing Bandcamp. Lately, I’ve noticed a huge increase in band pages that don’t actually sell music. Instead, they feature a lengthy album review and a link to an external website where you can supposedly download the album. These are scams. Spammers are registering unclaimed Bandcamp usernames for artists like The Murder City Devils, Shudder to Think, and DJ Spooky. The spammers then claim that band’s URL (ie “DJSpooky.Bandcamp.com”) and use it to drive traffic to scam sites like “booop.lol/2e29”, which then asks the user for a credit card in order to download the album. To make detection harder, the scammers rotate through dozens of domains, including ccut.blog, iwave.surf, and xflac.top. The landing pages all appear to use the same template. To get a sense of the scale, try changing the page identifier in one of the URLs (for example, booop.lol/1111 or…