Someone may have scammed Spotify for at least $288K with a chain of accounts replaying a suspicious playlist.