Anthropic vs Alibaba: 25,000 Fake Accounts and 28.8M Claude Exchanges

TL;DR: Anthropic accused operators linked to Alibaba's Qwen division and companies like DeepSeek of running nearly 25,000 fraudulent accounts that generated over 28.8 million interactions with Claude — aimed at distilling coding, reasoning, and planning into competing Chinese models. Anthropic called it the largest extraction campaign detected to date and briefed U.S. lawmakers and White House officials. On X, @GregKamradt said the underlying token black market was "obvious in retrospect"; @pmarca replied "Cyberpunk AF."

What Anthropic alleged

According to Reuters and CNBC (June 24, 2026), Sarah Heck, Head of Policy at Anthropic, sent a June 10, 2026 letter to Chairman Tim Scott and Ranking Member Elizabeth Warren on the U.S. Senate Committee on Banking, Housing, and Urban Affairs.

Anthropic describes distillation attacks as systematic, industrial-scale efforts to harvest American IP and repackage US frontier capability without bearing original R&D costs. The letter frames the Alibaba campaign as the largest known distillation attack Anthropic has detected — targeting agentic reasoning, software engineering, and long-horizon tasks specifically.

The letter ties distillation to national security: if PRC labs reach Mythos-caliber models through extraction, advanced cyber capabilities could deploy against US government and companies. Anthropic cites Project Glasswing as a US defensive program that has helped harden cyber posture — the same Glasswing context behind Mythos testing and the June 12 export controls.

Distillation here means using a frontier model's outputs — and often chain-of-thought reasoning traces — as training signal for a cheaper rival. You do not need weights; you need volume, diversity, and persistence.

Alibaba did not immediately respond to Reuters' request for comment in published reports.

June 27 — Mythos cyber narrative vs bot-farm blind spot

The distillation letter landed before the June 12 Fable/Mythos suspension, but the two stories collided publicly on June 27, 2026 when trending coverage juxtaposed:

Neither side is fully wrong. Real banking vulnerabilities exist — security firms disclose ACH and transaction-initiation bugs regularly. Controlled demos can show exploit paths without proving Mythos can drain arbitrary live accounts on demand. Likewise, Mythos-class cyber and bot-account detection are different engineering problems; failing one does not invalidate the other, but it complicates the political case for a global API shutdown.

For Fable restoration: the letter strengthens Anthropic's argument that identity verification matters for US-first return, while export-control opponents cite the same letter as evidence the ban overshoots operational risk. Status hub: Is Fable 5 back? — answer remains no on June 27.

How this trended on X

Grok's X summary (June 25, 2026) framed the story as a fast-moving news item: Anthropic's disclosure, lawmakers briefed, penalties still unclear.

Notable posts:

• @GregKamradt — "obvious in retrospect but I had no idea there was a black market for tokens" — linking industrial distillation to everyday reseller pricing.
• @pmarca — "Cyberpunk AF."
• @rememberlenny — "TIL" on the scale of the alleged Qwen campaign.
• @aleabitoreddit — noted the pattern feels "kind of known by now" but no real penalties enforced yet.

The through-line: builders already suspected capability leakage; Anthropic put numbers on it.

Hacker News: the supply chain underneath

The HN thread on Anthropic vs Alibaba exploded because tristanj explained how cheap Claude access scales — not just that labs want traces.

Core mechanics (summarized from the top comment):

1. Chinese resellers offer Claude at 70–90% below official Anthropic API prices.
2. They pool Claude Max subscriptions, use payment fraud, and route via proxy APIs.
3. They resell model output and reasoning chains to Chinese labs — subsidizing cheap tokens with trace sales.
4. Claude and ChatGPT are blocked in China; VPN + foreign cards push users to resellers (中转站 / transfer stations).
5. Example pricing cited: yunwu.ai allegedly advertising Opus-class access at ~93% off list API rates.

That comment is the bridge between headline geopolitics and developer economics. We captured the full HN screenshot and reseller playbook in AI Token Black Market: Claude Resellers at 70–93% Off.

Important distinction from HN debate:

Many HN commenters argued the two overlap: resellers log everything and double-dip — margin on tokens plus payment from labs for training data.

Why Anthropic added identity verification

Anthropic's layered defenses — geoblocking, phone verification, credit cards, live biometric KYC — map directly to bot-farm economics.

From the HN thread:

"These resellers operate tens of thousands of bot accounts, which is also why Anthropic introduced identity verification, to slow down the onslaught of bots."

Commentators also note evasion: residential proxies, ID verification as a service in low-income countries (~$30/account), and human prompt farms if automation fails.

Our export-control coverage ties the same week to Fable 5 / Mythos 5 restrictions — different lever, same war: keep frontier capability from becoming commodity training data.

DeepSeek, GLM, and the price war

HN users debated whether Chinese labs are "winning on merit" or riding subsidized Claude access.

tristanj argued DeepSeek permanently cut V4-pro API prices 75% because resold Opus tokens undercut them — Chinese open-weight providers forced to match impossibly cheap frontier access.

Counter-arguments on HN:

• Open-weight GLM and DeepSeek are genuinely efficient — US providers also sell them cheaply.
• Some resellers fake Opus with weaker models (system prompt: "you are Opus 4.6").
• Distillation + resale can coexist — real Opus traffic for traces, fake Opus for margin.

For builders, the practical takeaway: ultra-cheap Claude endpoints are a trust problem — wrong model, logged prompts, no DPA, sudden cutoffs.

Policy and penalties

Anthropic's letter asks Congress for three measures:

1. Threat information sharing — legislation enabling deeper collaboration between US government and frontier labs, plus clarified antitrust guidelines so labs can share PRC attack tactics without legal risk
2. Export controls on advanced compute — close loopholes (smuggling networks, offshore data centers) PRC labs use to run distillation at scale
3. Penalize PRC lab misconduct — make distillation costlier via the US economic security toolkit; Anthropic states it does not allow commercial Claude access for entities in China or subsidiaries of PRC-headquartered companies

The letter references NSTM-4 (Trump administration OSTP memo on distillation) and NSPM-11 (national security enterprise partnership with private AI companies for threat sharing and red-team exercises). Despite those whole-of-government efforts, Anthropic writes that distillation attacks remain widespread among PRC AI labs.

Open questions X and HN keep asking:

• Will there be enforcement beyond account bans and export controls?
• Does Alibaba face legal or trade consequences, or is this naming-and-shaming?
• Does distillation law apply when LLM outputs may not be copyrightable in the US?

@aleabitoreddit summarized the mood: "Feels like this is kind of known by now... but there's been no real penalties enforced yet. We'll see."

What this means for Claude users and builders

If you use official Claude

• Expect more friction at signup — ID checks are anti-bot economics, not just security theater.
• Max subscription pooling under resellers increases risk Anthropic tightens per-seat limits or weekly caps.

If you build agents

• Coding agents and harnesses inherit upstream token economics — gray-market keys can poison evals and leak IP.
• Eric Xing's agentic vs agentive framing: the harness is only as honest as the token supply.

If you follow AI geopolitics

• This is the industrial side of the token black market — not Telegram discount codes, but 28.8 million exchanges aimed at capability transfer.

Timeline

Update — July 28, 2026: Anthropic's position on open-weights models — Dario Amodei cites Anthropic's account-banning efforts against this exact distillation pattern as evidence for why policy, not just enforcement, is needed.

Related reading

• Anthropic's position on open-weights models — chips, distillation, testing
• Update — July 27, 2026: Token relay market — card merchants, pools, one-api, distillation buyers — the industrial plumbing under consumer gray-market pricing.
• Update — July 23, 2026: The distillation fight escalated from an Anthropic disclosure to a direct White House accusation — OSTP Director Kratsios says Moonshot AI distilled Fable 5 into Kimi K3 via smuggled Nvidia chips; Bessent threatens sanctions. Full story →
• AI token black market — resellers, pooled Max, trace sales
• US export controls on Fable 5 and Mythos 5
• Eric Xing: agentic vs agentive AI
• Why AI companies want you using agents

Primary sources: Reuters — Anthropic vs Alibaba · CNBC · Hacker News #48667495 · Greg Kamradt on X · YouTube Short

Alibaba allegations are Anthropic-reported unless independently verified. Reseller pricing claims come from HN/X community reports. This article is analysis for developers and policy readers — not legal advice.