The Chinese wholesale market for Claude and ChatGPT accounts

What happened

Now let me also check if there's a NEWS_POST_TEMPLATES.md to follow: A Chinese wholesale market for Claude and ChatGPT accounts has emerged as a mature, layered industry, with dedicated storefronts, Telegram merchants, and secondary consumer platforms moving high-subscription AI accounts at scale. Researcher Matt Lenhard, writing for Vectoral, mapped the full ecosystem — from sourcing tactics and pricing to buyer archetypes and daily sales volumes — in a piece published August 10, 2026.

This article walks through what that market looks like in practice, how the supply chain from account creation to relay operator actually functions, and why the implications extend well beyond price arbitrage. It is aimed at security engineers, platform trust teams, and developers building products that depend on Anthropic's or OpenAI's API infrastructure.

Lenhard's investigation found several dedicated Chinese platforms — henduohaopifa.com, zhanghao66.com, and a service called maihaoguanjia — selling wholesale Claude, ChatGPT, Grok, Gemini, Cursor, Codex, Copilot, Warp, and MidJourney accounts. One of the largest marketplaces, zhanghao66, claims daily sales of roughly ¥200,000, which translates to about $28,000. The site carries 37 SKUs and applies volume discounts — Claude Max drops from ¥770 to ¥725 at thirty units. On Goofish, Alibaba's consumer resale platform and the Chinese equivalent of Craigslist, a search for "Claude Account" returns 306 listings across three main product categories.

How it works

Separately, Lenhard identified a UK-registered company that branded itself as a software design studio but was operating as a Claude account reseller. The company was actively seeking to source more than 1,000 Claude accounts per month. The concealment behind a legitimate-looking corporate entity — a UK address, standard registration — illustrates how professionalized this supply chain has become. The zhanghao66 operator himself said he started on Goofish, sourcing Gemini accounts at ¥30 each and selling them at ¥99, doing a hundred orders on strong days, before building a dedicated storefront.

Accounts enter the market through five documented sourcing methods. Standard recharges involve a seller buying a subscription on behalf of a user account, sometimes to work around geographic card restrictions. Finished accounts are pre-registered, pre-subscribed credentials delivered to a buyer. Promotion and device arbitrage monetizes regional, carrier, handset, or education promotions. Ridesharing aggregates a single account across multiple simultaneous users. Account takeovers are the most alarming category: API keys or session cookies harvested through supply chain attacks or info stealers get resold directly to brokers or relay operators, and Lenhard notes this tactic is becoming more common.

Why it matters

Buyers on the wholesale side fall into three groups: foreign model labs sourcing accounts specifically for model distillation, token relay operators looking to acquire tokens below Anthropic's or OpenAI's list price to resell them at a margin, and individual consumers circumventing geo restrictions. The Telegram merchant AI HOME, advertised on NodeSeek, explicitly markets to relay operators, quoting ChatGPT Pro 20x finished accounts at ¥200 and calling out operators running relay stations by name in its ad copy. The market also has a Russian counterpart on plati.market, which shows an inverted price structure: Claude Max 20x lists at roughly ₽23,999 — about $290 — against Anthropic's $200 list price, a 45 percent premium rather than a discount, because those buyers cannot clear a payment card at all.

The pricing data on Goofish makes the economics concrete. Claude Pro median price is ¥150, or about $21, against Anthropic's $20 monthly list — effectively at parity for retail buyers on the consumer resale side. Claude Max 5x and 20x combined have 96 listings at a median of ¥750, roughly $105, against a $100 list price. At the wholesale level, zhanghao66 sells Claude Pro at ¥128 retail and lowers it further in volume. The margin for relay operators comes from selling tokenized access through a relay at a markup over what they paid for the account. A Vectoral framing notes that tokens have become a pseudo-currency, placing inference providers in a position analogous to banks — a segment of the market that historically had no serious fraud exposure is now facing it structurally.

Plati.market offers scale numbers that reinforce how established this is. A search for "Claude" on that platform returns 436 listings from 210 distinct sellers. Combined displayed sales are 254,000, and the single largest listing alone shows 88,084 sales. ChatGPT is even larger: one listing shows 115,207 sales. Maihaoguanjia, one of the Chinese storefronts, covers roughly sixty SKUs across Claude, ChatGPT, Gemini, Grok, Cursor, Codex, Copilot, Warp, and MidJourney, and specifically advertises KYC verification bypasses as a feature.

Who is affected

Anthropic and OpenAI bear the clearest direct impact. Account sharing, geo-restriction circumvention, and rate-limit arbitrage undermine the billing and usage assumptions their infrastructure pricing is built on. When a relay operator buys a Claude Max 20x account at wholesale and resells token throughput to dozens of downstream users, Anthropic collects one subscription fee against what could be dozens of concurrent sessions. Foreign model labs using these accounts for distillation represent a separate category of harm, one that affects the strategic value of frontier models rather than just subscription revenue.

Individual developers and companies are also in scope in a less obvious way. Account takeovers sourced from supply chain attacks or info stealers mean that any developer whose Anthropic API key or Claude session cookie is exposed — through a compromised dependency, a leaked environment file, or a malware infection — may find those credentials listed for resale within hours. The Goofish market already includes warranty pricing: one seller offers a ¥10 refund if an account gets banned, reflecting that account churn is a normal, priced-in risk. Some sellers on the platform offer invoices and corporate bank transfers, which signals that at least part of this market is serving businesses rather than individuals.

What to watch next

Lenhard flags a planned follow-up specifically on KYC verification bypass services, which maihaoguanjia already advertises openly. That piece will be worth reading for platform engineers evaluating whether identity verification at signup meaningfully raises the cost to source accounts or simply routes demand toward a parallel service layer. The Goofish "wants" counters across Claude account listings add up to roughly 11,000, providing a rough proxy for unmet demand that the platform has not converted to sales — a signal that supply constraints exist even at these prices.

The account takeover vector is the one to monitor most closely for builders. Unlike subscription arbitrage, which is ultimately a billing problem for the labs, a stolen API key or session cookie causes damage that falls on the original account holder. Lenhard notes that an unauthorized charge on a bank account is typically reversible through ACH protections, but an Anthropic account compromise carries no equivalent consumer backstop. Any team storing Anthropic API credentials in CI pipelines, shared environments, or third-party toolchains should audit those secrets against the same threat model they apply to financial credentials, because the secondary market that would monetize a compromise is already operating at scale.