Anthropic vs Alibaba: 25,000 Fake Accounts and 28.8M Claude Exchanges

TL;DR: Anthropic accused operators linked to Alibaba's Qwen division and companies like DeepSeek of running nearly 25,000 fraudulent accounts that generated over 28.8 million interactions with Claude — aimed at distilling coding, reasoning, and planning into competing Chinese models. Anthropic called it the largest extraction campaign detected to date and briefed U.S. lawmakers and White House officials. On X, @GregKamradt said the underlying token black market was "obvious in retrospect"; @pmarca replied "Cyberpunk AF."

What Anthropic alleged

According to Reuters and CNBC (June 24, 2026), Anthropic sent a June 10 letter to Senators Tim Scott and Elizabeth Warren on the Senate Banking Committee.

Distillation here means using a frontier model's outputs — and often chain-of-thought reasoning traces — as training signal for a cheaper rival. You do not need weights; you need volume, diversity, and persistence.

Alibaba did not immediately respond to Reuters' request for comment in published reports.

How this trended on X

Grok's X summary (June 25, 2026) framed the story as a fast-moving news item: Anthropic's disclosure, lawmakers briefed, penalties still unclear.

Notable posts:

• @GregKamradt — "obvious in retrospect but I had no idea there was a black market for tokens" — linking industrial distillation to everyday reseller pricing.
• @pmarca — "Cyberpunk AF."
• @rememberlenny — "TIL" on the scale of the alleged Qwen campaign.
• @aleabitoreddit — noted the pattern feels "kind of known by now" but no real penalties enforced yet.

The through-line: builders already suspected capability leakage; Anthropic put numbers on it.

Hacker News: the supply chain underneath

The HN thread on Anthropic vs Alibaba exploded because tristanj explained how cheap Claude access scales — not just that labs want traces.

Core mechanics (summarized from the top comment):

1. Chinese resellers offer Claude at 70–90% below official Anthropic API prices.
2. They pool Claude Max subscriptions, use payment fraud, and route via proxy APIs.
3. They resell model output and reasoning chains to Chinese labs — subsidizing cheap tokens with trace sales.
4. Claude and ChatGPT are blocked in China; VPN + foreign cards push users to resellers (中转站 / transfer stations).
5. Example pricing cited: yunwu.ai allegedly advertising Opus-class access at ~93% off list API rates.

That comment is the bridge between headline geopolitics and developer economics. We captured the full HN screenshot and reseller playbook in AI Token Black Market: Claude Resellers at 70–93% Off.

Important distinction from HN debate:

Many HN commenters argued the two overlap: resellers log everything and double-dip — margin on tokens plus payment from labs for training data.

Why Anthropic added identity verification

Anthropic's layered defenses — geoblocking, phone verification, credit cards, live biometric KYC — map directly to bot-farm economics.

From the HN thread:

"These resellers operate tens of thousands of bot accounts, which is also why Anthropic introduced identity verification, to slow down the onslaught of bots."

Commentators also note evasion: residential proxies, ID verification as a service in low-income countries (~$30/account), and human prompt farms if automation fails.

Our export-control coverage ties the same week to Fable 5 / Mythos 5 restrictions — different lever, same war: keep frontier capability from becoming commodity training data.

DeepSeek, GLM, and the price war

HN users debated whether Chinese labs are "winning on merit" or riding subsidized Claude access.

tristanj argued DeepSeek permanently cut V4-pro API prices 75% because resold Opus tokens undercut them — Chinese open-weight providers forced to match impossibly cheap frontier access.

Counter-arguments on HN:

• Open-weight GLM and DeepSeek are genuinely efficient — US providers also sell them cheaply.
• Some resellers fake Opus with weaker models (system prompt: "you are Opus 4.6").
• Distillation + resale can coexist — real Opus traffic for traces, fake Opus for margin.

For builders, the practical takeaway: ultra-cheap Claude endpoints are a trust problem — wrong model, logged prompts, no DPA, sudden cutoffs.

Policy and penalties

Anthropic informed U.S. lawmakers and White House officials, per trending news summaries. The April 2026 White House distillation memo pledged inter-agency coordination.

Open questions X and HN keep asking:

• Will there be enforcement beyond account bans and export controls?
• Does Alibaba face legal or trade consequences, or is this naming-and-shaming?
• Does distillation law apply when LLM outputs may not be copyrightable in the US?

@aleabitoreddit summarized the mood: "Feels like this is kind of known by now... but there's been no real penalties enforced yet. We'll see."

What this means for Claude users and builders

If you use official Claude

• Expect more friction at signup — ID checks are anti-bot economics, not just security theater.
• Max subscription pooling under resellers increases risk Anthropic tightens per-seat limits or weekly caps.

If you build agents

• Coding agents and harnesses inherit upstream token economics — gray-market keys can poison evals and leak IP.
• Eric Xing's agentic vs agentive framing: the harness is only as honest as the token supply.

If you follow AI geopolitics

• This is the industrial side of the token black market — not Telegram discount codes, but 28.8 million exchanges aimed at capability transfer.

Timeline

Related reading

• AI token black market — resellers, pooled Max, trace sales
• US export controls on Fable 5 and Mythos 5
• Eric Xing: agentic vs agentive AI
• Why AI companies want you using agents

Primary sources: Reuters — Anthropic vs Alibaba · CNBC · Hacker News #48667495 · Greg Kamradt on X · YouTube Short

Alibaba allegations are Anthropic-reported unless independently verified. Reseller pricing claims come from HN/X community reports. This article is analysis for developers and policy readers — not legal advice.