{"id":131834,"date":"2026-08-06T17:13:28","date_gmt":"2026-08-06T17:13:28","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/131834\/"},"modified":"2026-08-06T17:13:28","modified_gmt":"2026-08-06T17:13:28","slug":"discounted-claude-access-bought-on-the-gray-market-may-expose-every-prompt-you-send","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/131834\/","title":{"rendered":"Discounted Claude access bought on the gray market may expose every prompt you send"},"content":{"rendered":"

More than half a dozen services advertised on underground forums and messaging platforms, offering discounted or \u201cunlimited\u201d token access to frontier AI models<\/a>, were discovered by Okta.<\/p>\n

Okta believes the trend is likely driven by Chinese users seeking access to AI models that are unavailable because of regulatory and provider restrictions.<\/p>\n

\u201cThe demand is driven by both cost and restrictions on access. It is being satisfied in a variety of ways, one of which is through fraudulent account registrations, often capitalizing on free trials or credits,\u201d Okta said.<\/p>\n

According to researchers, cost, access restrictions, and a degree of anonymity pull people toward these services. However, most are probably not familiar with the disadvantages.<\/p>\n

\u201cWhile the gray market offers some operational security over direct purchases, it cuts both ways,\u201d Okta noted. <\/p>\n

\u201cWhen services are configured as a gateway proxy, the service provider has full visibility into prompts, as those prompts must be forwarded to a model. This is a privacy concern, as the service provider could accidentally leak or sell data,\u201d they added. <\/p>\n

Access can also disappear without notice, as AI companies tighten fraud controls and cut off the accounts these services depend on.<\/p>\n

Poison Claude<\/p>\n

One such site, Poison Claude, claims to offer access to four Anthropic models: Opus 4.8, Opus 4.7, Opus 4.6, and Sonnet 4.6.<\/p>\n

\"AI<\/p>\n

Advertisements for Poison Claude (Source: Okta)<\/p>\n

Advertisements for Poison Claude describe how the service keeps token prices low. According to the service\u2019s website, it takes advantage of free bonus credits, such as the US$100 bonus credit for AWS Bedrock accounts. The operator says it adds those accounts to a shared pool, routes customer requests through a selected account, and charges between 5% and 15% of the official per-token price, depending on the model.<\/p>\n

Poison Claude takes payment in several cryptocurrencies, including Tether, USD Coin, Ethereum, Litecoin, and Bitcoin. Once paid, the customer gets an API key for an Anthropic-compatible API, along with instructions for setting environment variables so their installation of Claude Code sends its traffic to Poison Claude\u2019s servers instead of Anthropic\u2019s.<\/p>\n

\u201cPrompts are passed from Poison Claude\u2019s API to Anthropic, with the answers returned to the customer.\u201d<\/p>\n

A configuration mistake gave researchers a clue to how popular Poison Claude is. The service\u2019s operators left an API route exposed, showing 881 total users and 872 active ones.<\/p>\n

The main domain for Poison Claude, poison-claude.bitsender[.]top, ran behind Cloudflare\u2019s CDN, hiding its originating IP address. Following responsible disclosure, Cloudflare, alerted about Poison Claude\u2019s use of its CDN to hide the service\u2019s origin, placed a phishing warning on the site, but had taken no action on claudeopus[.]shop even though that domain also runs behind Cloudflare.<\/p>\n

Ecomagent<\/p>\n

Ecomagent, a second service Okta identified, offers unlimited tokens for subscriptions below market price, with access advertised to Opus 4.8, Opus 4.6, Sonnet 4.6, and GPT Codex 5.5. <\/p>\n

A sample API request posted on the service\u2019s own website contained an ID field prefixed \u201cmsg_vrtx\u201d, a signature specific to Google\u2019s Vertex platform. <\/p>\n

\u201cLike Amazon, Google Cloud offers credit for new accounts, although users must register a billing payment card. Google also offers up to $350,000 in credits to AI startups that plan to use the Gemini Enterprise Agent Platform or its Gemini model,\u201d Okta explained.<\/p>\n

When Okta tested Ecomagent directly, the \u201cmsg_vrtx\u201d signature did not appear in the response.<\/p>\n

Like Poison Claude, Ecomagent left an unauthenticated API route exposed, showing total and active user counts, both under 1,000.<\/p>\n

China-based users likely behind bulk of fake AI signups<\/p>\n

Okta also tracked a separate wave of automated signup fraud hitting an AI video company\u2019s free trial. Over about three years of log data, the company recorded more than 105,000 brute-force attempts from 251 distinct IP addresses tied to bot activity.<\/p>\n

\u201cBased on our data, we can say it is highly probable that China-based users are circumventing regional restrictions. Some of the top VPN providers, like QuickQ VPN, are commonly used by Chinese internet users, and the top email domain was qq.com, which is a popular email service in China,\u201d Okta wrote.<\/p>\n

There are indications scammers are cashing in on this too. Access to the service was advertised on cybercriminal forums, where one seller, reached over Telegram, claimed to have both API keys and login credentials for sale, the credentials offering what they called \u201cfull access.\u201d<\/p>\n

A separate vendor charged $40 in Tether for a \u201ccreated\u201d account, arguing it beat a hacked one since stolen credentials get flagged and shut down faster. That seller handed over a username and password, promising the account would convert to a paid membership once the trial period ended.<\/p>\n

\u201cWhile a certain amount of fraudulent registration is an inevitable downside of offering free trials, it can be countered,\u201d Okta concluded<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"More than half a dozen services advertised on underground forums and messaging platforms, offering discounted or \u201cunlimited\u201d token…\n","protected":false},"author":2,"featured_media":59049,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[24,53,3154,182,2858,4182],"class_list":["post-131834","post","type-post","status-publish","format-standard","has-post-thumbnail","category-anthropic","tag-ai","tag-anthropic","tag-anthropic-claude","tag-claude","tag-fraud","tag-okta"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/131834","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=131834"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/131834\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/59049"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=131834"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=131834"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=131834"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}