Chinese gray market bypasses Anthropic's Claude access restrictions despite US-China AI tensions

Despite Anthropic implementing the industry's strictest access controls on China, a highly resilient gray market has emerged to bypass these restrictions. Chinese developers utilize a modular supply chain of "transfer stations"—API proxies hosted outside China—to purchase Claude tokens at 10% of the official price using WeChat or Alipay. Operators circumvent biometric and identity checks using deepfakes, fake IDs, and global gig workers. To sustain rock-bottom prices, proxies exploit free credits, swap premium models for cheaper alternatives, and potentially harvest valuable user logs to sell as AI training data.

Chinese Claude gray market

• ▪Chinese developers can purchase Claude tokens through gray market channels for approximately 10 percent of Anthropic's official list price.
• ▪The gray market user base for Claude in China includes students, researchers, developers, tech employees, app makers, hobbyists, and Chinese AI labs seeking to distill Western models.
• ▪A thriving gray market in China allows developers to bypass Anthropic's strict geoblocking, credit card checks, and biometric verification to access Claude AI models.

Transfer station proxy infrastructure

• ▪Chinese developer communities utilize "transfer stations," which are API proxies hosted on servers outside China, to route Claude API requests and bypass geoblocks.
• ▪The transfer station proxy network operates as a resilient, modular supply chain involving upstream account brokers, SMS verification platforms, reverse-engineering specialists, and downstream e-commerce resellers.
• ▪Transfer station users pay for Claude access in Chinese yuan using domestic payment platforms WeChat or Alipay, eliminating the need for VPNs or foreign credit cards.

Identity verification circumvention methods

• ▪Identity verification markets recruit real people in low-income countries to complete biometric verifications, similar to the black market for Worldcoin iris scans in Cambodia and Kenya.
• ▪Gray market operators circumvent Anthropic's identity verification checks by using AI services to generate fake IDs and deepfake technology to defeat biometric checks.

Discounted pricing through account farming

• ▪Gray market operators lower Claude token prices by farming Anthropic's free $5 credits, exploiting enterprise and education discounts, and splitting $200 Max plans across multiple users.
• ▪Accounts funded with stolen or fraudulently used credit cards are suspected of flowing into the gray market token pools to subsidize cheap access.

Model swapping by proxies

• ▪A study by Germany's CISPA Helmholtz Center for Information Security examined 17 API proxies and found widespread model swapping, including a Gemini-2.5 endpoint scoring 37 percent on a medical benchmark instead of the official 83.82 percent.
• ▪Proxy operators engage in "diluting" by quietly rerouting requests meant for premium models like Opus 4.7 to cheaper models like Sonnet or Chinese models like Qwen.

Usage data monetization risks

• ▪Proxy operators can potentially monetize user logs containing prompts, responses, tool calls, and codebase context from coding agents as valuable training or distillation data.
• ▪Chinese developers warn that the low-cost token business serves primarily as customer acquisition, with the real profit margins residing in the collection and monetization of user logs.