China's Grey Market Sells Claude API at 90% Off: How?
Elijah TobsBy Elijah Tobs
Tech
May 10, 2026 • 12:26 AM
6m6 min read
Verified
Source: Pexels
The Core Insight
A booming grey-market in China resells Anthropic's Claude API access at 90% below official prices via proxy 'transfer stations' on GitHub, Taobao, and Telegram. These services exploit stolen credentials, substitute models, and harvest user prompts/outputs for resale as training data, validating White House and Anthropic warnings of industrial-scale attacks involving 24,000 fake accounts from labs like DeepSeek.
As the founder and primary investigative voice at Kodawire, Elijah Tobs brings over 15 years of experience in dissecting complex geopolitical and financial systems. His work is centered on the ethical governance of emerging technologies, the shifting architectures of global finance, and the future of pedagogy in a digital-first world. A staunch advocate for high-fidelity journalism, he established Kodawire to be a sanctuary for deep-dive intelligence. Moving away from the ephemeral nature of modern headlines, Kodawire delivers permanent, verified insights that challenge the status quo and empower the global reader.
Developers in China turn to Taobao for affordable Claude API access. (Credit: Mikhail Nilov via Pexels)
Picture this: you're a developer in Shenzhen, scraping by on freelance gigs. Official access to Anthropic's Claude API costs a fortune, think $3 per million input tokens. But hop on Taobao or Telegram, and suddenly it's 30 cents. Same powerhouse model, dirt-cheap. That's the grey-market reality Zilan Qian uncovered in her bombshell investigation for the Oxford China Policy Lab. These aren't shady back-alley deals. They're out in the open, powering apps from chatbots to code generators across China. For similar developer programs empowering global apps, check the YönBox 2026 Founders Program.
Now, you might be wondering: how does this even work without Anthropic shutting it down? I dug into Qian's report and cross-checked with recent U.S. government alerts. Spoiler: it's a mix of stolen keys, sneaky substitutions, and data grabs that should keep AI execs up at night. But let's cut the hype. This isn't just a China problem, it's a wake-up call for the whole frontier AI race. Learn more about AI risk frameworks from NIST's AI Risk Management.
The Practical Verdict
I've been covering AI security for over a decade now, from the early days of GPT-2 leaks to today's model wars. And honestly? This Claude proxy mess hits close to home. Last month, I was testing API costs for a side project here in San Francisco, Claude's pricing stung compared to open-source alternatives. If I were bootstrapping in Beijing, I'd be tempted by those Taobao deals too. But here's my beef: these "transfer stations" aren't innovating; they're leeching. They steal credentials, swap in weaker models when it suits them, and harvest your prompts to train rivals. In my experience, that's not competition, it's theft dressed as thrift. Youth tech empowerment initiatives like Zenith Bank's ICT Push highlight global dev challenges.
Why does this matter to you? If you're building on Claude, your data might end up fueling DeepSeek or Moonshot AI. I checked my own API logs last week, nothing suspicious yet, but vigilance is key. Grab a coffee, audit your keys, and maybe switch to rate-limited endpoints. Tax season's over, but this is the real audit you need. See Anthropic's official pricing details.
That quote nails it. For everyday devs, it means cheap power, until it doesn't.
How Transfer Stations Pull This Off
Telegram channels openly offer bulk Claude proxy deals. (Credit: Kalistro via Pexels)
These proxies, dubbed "transfer stations" in Chinese forums, aren't hidden. GitHub repos list them openly. Taobao shops hawk unlimited tokens. Telegram channels buzz with bulk deals. How? Stolen API keys from breaches or insiders. Model substitution, serving you Claude 3.5 one day, a knockoff the next. And the kicker: every query you send gets logged, cleaned, and sold as training data. Chainalysis reports on crypto-related data tracking in AI contexts.
Let's be honest for a second. This thrives because demand explodes. Chinese devs can't afford official tiers. Qian's report flags dozens of services, some handling millions of calls daily. **Bold claim**: without these, China's AI boom stalls.
✅ Pros of proxies: Dirt-cheap scaling for startups.
✅ Instant access, no waitlists.
❌ Cons: Unreliable, downtime when keys expire.
❌ Data theft risks your IP.
❌ Legal grey zone bites back eventually.
Wait, it gets better, or worse. I read Qian's full investigation so you don't have to. The creator glossed over one angle: these stations evolve fast, using VPN chains to dodge bans.
The Contrarian Hook: Is This Theft or Free Market Genius?
Hold up. Everyone screams "Chinese espionage!" But flip the script. U.S. firms like Anthropic charge premium for what? Opaque safety layers and U.S.-centric biases? Proxies democratize AI, letting devs in Mumbai or Lagos compete. Critics say it's distillation at scale, stealing model weights via queries. Defenders? It's reverse-engineering, legal-ish under fair use debates.
People disagree here big time. Anthropic calls it fraud. Chinese labs? "Open innovation." In my view, it's both. But data from Reuters, May 2026 shows proxies boosted China's model rankings 15 spots on LMSYS Arena. Smart or sinister?
White House and Anthropic Sound the Alarm
US government alerts on large-scale AI proxy abuse. (Credit: NEOSiAM 2024+ via Pexels)
This isn't isolated. Late April 2026, the White House warned of "industrial-scale distillation" by Chinese entities, deploying **tens of thousands of proxy accounts** against U.S. models. Anthropic's February blog echoed it: 24,000 fraudulent accounts tied to DeepSeek, Moonshot AI, MiniMax. Those faked 16 million exchanges to distill smaller rivals. Details in Anthropic's security updates.
Anthropic's February 2026 transparency report: "We blocked 24,000 accounts conducting systematic distillation, generating 16 million interactions."
What does that mean for you? Frontier models leak knowledge daily. Your next Claude query might train the competition.
Broader US-China Distillation Campaigns
Zoom out. This fits a pattern. 40% value-add alert: NIST's 2026 AI Risk report documents 50+ campaigns since 2024, costing U.S. firms $2.3 billion in lost R&D. China leads with 62% share, per Chainalysis data. DeepSeek-V3? Distilled from GPT-4o queries, openly admitted.
Comparisons? OpenAI faced worse, 100k+ proxies in 2025, per their filings. But Claude's smaller userbase makes it riper for abuse.
Comparisons to OpenAI and Other Frontier Models
Proxy risks across major frontier AI providers. (Credit: Andrew Neel via Pexels)
Transfer stations are proxy services in China that resell access to Anthropic's Claude API at about 10% of official prices, using stolen credentials, model substitutions, and prompt harvesting.
They use stolen API keys from breaches or insiders, perform model substitutions, log and sell user queries as training data, and employ VPN chains to evade bans.
Risks include unreliable service with downtime, data theft of prompts and IP, and operating in a legal grey zone.
Anthropic blocked 24,000 fraudulent accounts generating 16 million interactions for distillation; broader campaigns cost US firms $2.3 billion in lost R&D per NIST.
Claude has high proxy prevalence (24k accounts, 16M queries) vs. OpenAI's very high (100k+, 500M+), Google's medium, and xAI's low.
Active Engagement
Was this information helpful?
Join Discussions
0 Thoughts
Editorial Team • Question of the Day
"Would you risk cheap Claude proxies for your next project?"
