Skip to content
Rush Commerce
AI & Automation3 min read

Claude gray-market API resellers: 70–90% off, but who reads it?

China's Claude 'transfer stations' resell API access at 70–90% off. Why any cheap AI API reseller is a data and model-swap risk, and how to vet yours.

Anthropic does not sell Claude in China. Chinese developers use it anyway. A new report from The Information says gray-market Claude API resellers, called "transfer stations," are working openly in Beijing and selling access at 70–90% below Anthropic's list price. The story is about China. The lesson applies to any business that buys AI from a middleman because the price looks too good.

What actually happened

The Information reported on October 5 that about six of roughly 30 tenants in one office building in Beijing's Haidian district resell Claude access, according to a summary of the exclusive. A transfer station is a proxy: it takes a developer's prompt, sends it to Claude through an overseas account, and collects payment in RMB through WeChat or Alipay.

Earlier research by Zilan Qian of the Oxford China Policy Lab, covered by The Decoder, explains where the discount comes from:

  • Farmed accounts registered in bulk with SMS verification services, to collect free credits
  • Shared discounts from enterprise and education plans
  • Accounts paid for with fraudulent cards
  • Model swapping: a customer pays for Opus, and the proxy quietly sends the request to a cheaper Sonnet model or a Chinese model

On data: the proxy sees every prompt, response and tool call. Qian notes that operators could sell those logs, but says there is no proof yet that they do this systematically. We report it as a risk, not a fact.

Why it matters for your business

The proxy is a man in the middle by design. Any reseller that sits between you and the model provider can read your traffic. Customer names, contracts, source code, API keys pasted into a prompt: all of it passes through a server you did not vet.

You may not get the model you pay for. Model swapping is hard to catch. If your outputs suddenly get worse, or your evals drift without a version change, the cause could be a cheaper model behind the same label.

Stolen-card supply means sudden death. When the provider bans the accounts behind a reseller, your service stops with no notice and no refund path.

How to vet a reseller or router:

  1. Buy direct from the model provider, or through a major cloud (AWS Bedrock, Google Vertex AI, Azure) under a real contract.
  2. If you use a third-party router, read its data-retention policy and confirm it has a published business relationship with the provider.
  3. Run a small, fixed eval set every week. A quality drop with no version change is a warning.
  4. Never paste secrets into prompts, whatever the vendor.

A price that is 90% below list is not a deal. It is a signal.

Key takeaways

  • The Information found Claude resellers in about 6 of 30 tenants in one Beijing office building
  • Transfer stations sell access at 70–90% below Anthropic's prices through overseas proxy accounts
  • Discounts come from farmed accounts, shared enterprise plans, fraudulent cards and model swapping
  • Any proxy can read your prompts; systematic log resale is possible but not proven
  • Buy AI direct or through a major cloud, and run weekly evals to catch silent model swaps

Want to know exactly which model answers your customers? We build AI systems on direct provider contracts, with logging and weekly evals you own, so a silent swap or a banned account never takes you down. See how we build or talk to us about your stack.

Sources: Dealroom summary of The Information's report, The Decoder.

  • #claude
  • #api-resellers
  • #ai-security
  • #vendor-risk
  • #anthropic
TR

Tommy Rush — Founder, Rush Commerce

Operator turned builder. 15+ years running operations — now shipping the systems businesses run on. More

Get The Rush Report weekly — one email, zero fluff.