Claude Grey Market in China: How 90%-Off Relays Work

Short answer

The discount is real. It just doesn't come from Anthropic, and it isn't free.Chinese 'transfer stations' (中转站) take your request, send it to Claude through accounts they control overseas, and charge you in yuan. ChinaTalk reports a typical rate of 1 RMB per $1 of tokens, which it puts at 70–90% below official prices, and some offers go as low as 10%. According to the same reporting, the margin comes from free-credit farming, resold quota, split Max plans and accounts paid for with fraudulent cards. Buyers can't confirm which model actually answers them, and the operator sees every prompt they send.

Source: ChinaTalk: How to Buy Cheap Claude Tokens in China (Zilan Qian, May 5, 2026) · 2026-10-08; WinBuzzer: China's cheap Claude tokens run through proxy markets (July 3, 2026) · 2026-10-08

How a 'transfer station' works

Anthropic doesn't sell commercial access to Claude in China, and mainland China isn't on its supported-regions list for either the API or Claude.ai. Relays fill that gap. WinBuzzer, citing ChinaTalk, reports that operators take payment through WeChat or Alipay, so buyers need no foreign phone number, overseas card or Anthropic account. The South China Morning Post found these services advertised on Alibaba's Taobao and Xianyu marketplaces, according to Memeburn's summary of its reporting. Listings promised 'native' Claude Opus, unlimited Claude Code and one-million-token context windows.

Source: Anthropic: Supported Regions Policy · 2026-10-08; Anthropic: Detecting and preventing distillation attacks (Feb 23, 2026) · 2026-10-08; WinBuzzer: China's cheap Claude tokens run through proxy markets (July 3, 2026) · 2026-10-08; Memeburn: China's Claude API grey market sells AI access at 90% off (May 14, 2026) · 2026-10-08

A baffled person at a cheap market stall as a hand behind it quietly pockets a folded note. — Relay stations sell cheap access to Claude, but the savings come from somewhere other than Anthropic.

ChinaTalk lists the supply chain behind the low prices. Operators bulk-register accounts for free credits, resell other users' unused quota, exploit corporate and education discounts, and split one $200 Max plan among many buyers. Accounts bought with stolen or fraudulent cards, it says, enter the pool 'at effectively zero cost to the operator.' In other words, a large part of the discount is paid for by someone else's fraud.

Source: ChinaTalk: How to Buy Cheap Claude Tokens in China (Zilan Qian, May 5, 2026) · 2026-10-08

A panicking person shakes a sealed paper bag, unsure what is really inside it. — Some relays may not run the model they advertise, so it is hard to confirm you are actually talking to Claude.

Anthropic is pushing back, and the relays are adapting

In February 2026, Anthropic said three Chinese labs had run distillation campaigns, generating more than 16 million exchanges through about 24,000 fraudulent accounts. It said one proxy network managed more than 20,000 of those accounts at the same time, and that when one account is banned, a new one takes its place. Anthropic responded by tightening verification for education, research and startup accounts. Its help center now says some users must verify their identity with a physical government photo ID and possibly a live selfie, handled by Persona. ChinaTalk reports that proxy supply chains are already looking for ways around that, including deepfakes and real people recruited to pass the checks.

Source: Anthropic: Detecting and preventing distillation attacks (Feb 23, 2026) · 2026-10-08; Claude Help Center: Identity verification on Claude · 2026-10-08; ChinaTalk: How to Buy Cheap Claude Tokens in China (Zilan Qian, May 5, 2026) · 2026-10-08

resell the Services except as expressly approved by Anthropic

Anthropic Commercial Terms of Service, Section D.4 (effective June 17, 2025)

Source: Anthropic: Commercial Terms of Service · 2026-10-08

That clause appears among the things API customers may not do. Use is also tied to Anthropic's policy on the countries and regions it supports. A relay reselling API access to buyers in an unsupported region is outside what those terms allow. Consumer accounts have their own rules: Anthropic's consumer terms bar sharing login details, API keys or credentials, or making an account available to others. If the operator's accounts get banned, your 'subscription' disappears with them, and Anthropic is not the company you paid.

Source: Anthropic: Commercial Terms of Service · 2026-10-08; Anthropic: Consumer Terms of Service · 2026-10-08

Are you even talking to Claude?

CISPA researchers identified 17 'shadow APIs' cited in 187 academic papers and audited three of them closely. In 'Real Money, Fake Models,' accepted to ACM CCS 2026, they report performance gaps of up to 47.21% compared with official APIs. Fingerprint-based identity checks failed in 45.83% of cases, which the authors say is consistent with deceptive model claims. ChinaTalk adds that a proxy 'can silently route to Sonnet, Haiku, or, in the worst case, GLM or Qwen.' It also says users often notice only on hard tasks, when answers feel 'dumbed down.'

Source: arXiv 2603.01919: Real Money, Fake Models: Deceptive Model Claims in Shadow APIs · 2026-10-08; ChinaTalk: How to Buy Cheap Claude Tokens in China (Zilan Qian, May 5, 2026) · 2026-10-08

Our take: this is the most overrated bargain in AI right now. People treat '90% off Claude' like a clever hack. It's closer to buying a 'designer' bag from a car trunk: you don't know what's inside, and the seller now knows where you live. The worst part isn't the possible model swap. It's that developers pipe whole codebases, API keys in config files and client data through a stranger's server, because that's how Claude Code and Cursor work. ChinaTalk's line 'The logs are the product' should be printed on every listing. To be fair, the reporting says systematic log resale is still unverified. But you are trusting someone whose business already runs partly on fraudulent cards. Anthropic deserves some criticism too: blocking a whole market leaves demand behind, and the grey market supplies it. That explains the relays. It doesn't make them safe.

If you're already using a relay, ask yourself

Have I sent source code, credentials or customer data through it? Assume the operator can read all of it, and rotate any keys you exposed.
Can I verify which model answered? Researchers found fingerprint checks failed in 45.83% of cases across the shadow APIs they audited.
What happens to my prepaid balance when the operator's accounts are banned? Anthropic says banned accounts in these networks get replaced, so the operator keeps going, but your balance may not survive.
Does my employer or client allow sending its code to an unvetted third party?

Source: arXiv 2603.01919: Real Money, Fake Models · 2026-10-08; Anthropic: Detecting and preventing distillation attacks · 2026-10-08; ChinaTalk: How to Buy Cheap Claude Tokens in China · 2026-10-08

Tip

Before subscribing to anything, check whether your country appears on Anthropic's Supported Regions page. If it does, buy directly from Anthropic. If it doesn't, a reseller doesn't make your access legitimate. It just adds another party who can read your data.

Optional: compare Claude plan listings from sellers (a seller listing, not official Anthropic access or an endorsement). That link carries our partner code Sk52g, which is how a purchase is attributed to this site. Promotion code UPD3S.

Sources (read 2026-10-08)

Claude · Compare price & terms →

Claude at 90% Off in China? You're Paying With Your Code

How a 'transfer station' works

Anthropic is pushing back, and the relays are adapting

Are you even talking to Claude?

Check the price before you renew