New Delhi, Oct 5 — An underground market for access to Anthropic’s AI model Claude has rapidly expanded in China, with brokers reselling account tokens to domestic users even as the service is officially blocked in the country, a new report has said.
The report from South Korea-based The Chosun said the trade relies on “token resellers” who set up servers overseas where Claude is permitted and then gather numerous accounts.
Further, they sell access to Chinese users, including scholars and engineers as they prefer Claude over domestic models for code generation and eagerly test new versions. “Token resellers use bulk email addresses acquired through past cryptocurrency ventures to successfully register Claude accounts,” the report cited US IT outlet The Information as saying.
As many as 6 out of 30 companies in an office building in Haidian District, Beijing, are engaged in “AI access reselling,” while tens of thousands of such entities are reported to exist nationwide.
As US platforms tighten controls, resellers have adopted more sophisticated circumvention tactics, such as creating shell companies in Southeast Asia, the Middle East and the United States to sign enterprise agreements with Anthropic or Amazon Web Services.
“These processes occur outside China, making tracking difficult. It’s a game of hide-and-seek between those blocking accounts and those misusing them,” the report said.
Illegally obtained accounts are reportedly used for “distillation learning” by Chinese firms. In March 2026, US firm Anthropic accused three Chinese unicorns including DeepSeek of having illegally extracted capabilities from its Claude model to advance their own systems.
The modus-operandi of the alleged theft involved creation of around 24,000 fraudulent accounts to train Chinese models using over 16 million exchanges with Claude.
The company warned that models produced this way may lack the safety guardrails implemented by companies such as itself and thus could be used for cyberattacks, and biological weapons.