2 Sources
[1]
Anthropic moves to close loopholes that allow Chinese access to Claude
Anthropic is moving to shut loopholes that have allowed Chinese companies to circumvent the AI company's stringent restrictions on unauthorised use in the country. People familiar with the matter said that Chinese companies including Ant Financial have accessed Anthropic's AI tools such as Claude Code through workarounds that include cloud providers and overseas subsidiaries. The people said that Ant had provided employees with corporate Claude accounts that were accessed through the company's intranet, which is connected to its Singapore-based entity. ByteDance does not facilitate access to Claude but this year introduced a reimbursement scheme allowing engineers to put personal subscriptions for the platform on their expenses, according to five employees of the TikTok owner. The engineers access those subscriptions using VPNs. Such workarounds do not violate US or Chinese law, but they breach Anthropic's terms of service, which specify that Chinese companies and foreign entities owned by them are banned from using its models. Anthropic has one of the strictest bans among US AI companies on usage in China, requiring user verification and banning payment from Chinese banks. By contrast, Chinese users find it easier to access OpenAI's tools through VPNs, which are widely used in the country. The company does not require the same user verification as Claude. The efforts to access Claude from China illustrate the continuing value of leading US AI products to Chinese engineers despite growing access restrictions and the increased competitiveness of domestic models. Anthropic's coding tools are particularly popular among Chinese software engineers and AI start-ups because their outputs can be used for "distillation", in which smaller models are trained to mimic more capable ones. Ant and ByteDance did not respond to requests for comment. Anthropic had stepped up efforts to detect and close down Chinese use through the loopholes, which had proven difficult to police, people familiar with the matter said. Routes used include accessing Claude through Microsoft's Azure cloud services via foreign subsidiaries. Microsoft sold application programming interface access to Chinese companies with Singapore-based entities, allowing engineers based in mainland China to use Claude through their companies' internal networks, according to people with knowledge of the matter. A person familiar with the practice said companies using overseas entities to access Claude was "a known issue" and "not limited to any one provider". Microsoft said: "Anthropic monitors use of the service and enforces their terms and conditions, with Microsoft's support." As part of its efforts to crack down on unauthorised access, Anthropic has targeted "transfer station" services, which relay requests from users in mainland China through Claude accounts registered overseas before returning the responses. However, larger Chinese AI groups generally avoid transfer stations because the services' operators are widely suspected of storing or reselling prompts. Executives worry rivals could analyse those requests to understand how they are using advanced models to improve their own systems. Anthropic said it also constantly updated its tools to identify and take enforcement action as Chinese users developed new evasion techniques. Previously, it has used Claude Code to look for clues such as the computer's timezone that a user was actually working from mainland China. "We explicitly prohibit accessing or facilitating access to Claude in unsupported regions, including China," it said. "Anthropic is the only frontier AI company that restricts sales to PRC-controlled companies, including subsidiaries incorporated outside China." The company added that it "enforces this policy through continuous, evolving detection systems, working alongside our partners to identify and ban accounts that violate our policies". Beijing has banned its companies from using overseas models hosted in data centres outside the country to develop consumer applications because of restrictions on cross-border data flows. But the regulation does not restrict Chinese AI labs from using foreign models for internal research and development purposes. Additional reporting Wenjie Ding, Cheng Leng and Tina Hu in Beijing and Madhumita Murgia in London
[2]
Anthropic targets loopholes used by Chinese firms to access Claude, FT reports By Investing.com
Investing.com-- Anthropic is tightening efforts to block unauthorized access to its artificial intelligence services from China after identifying methods used by Chinese companies to bypass its restrictions, the Financial Times reported on Thursday, citing people familiar with the matter. The report said companies including Ant Financial have accessed Anthropic's Claude AI tools through overseas subsidiaries, cloud providers and other workarounds. Get real-time updates on market-moving news with InvestingPro Ant provided employees with corporate Claude accounts linked to its Singapore-based entity, while ByteDance reimbursed engineers for personal Claude subscriptions that they accessed using virtual private networks (VPNs), the report added. The practices reportedly do not violate U.S. or Chinese law but breach Anthropic's terms of service, which prohibit Chinese companies and foreign entities under their control from using its AI models. According to the FT, Anthropic has stepped up efforts to detect and shut down such access, including monitoring accounts for indicators such as users' computer time zones and targeting "transfer station" services that relay requests through overseas Claude accounts. The newspaper said some companies also accessed Claude through foreign subsidiaries using cloud infrastructure, including Microsoft's (NASDAQ:MSFT) Azure platform.
Share
Copy Link
Anthropic is cracking down on unauthorized access to Claude AI after discovering Chinese companies like Ant Financial and ByteDance have been using workarounds including overseas subsidiaries, cloud providers, and VPNs to bypass its stringent restrictions. While these methods don't violate US or Chinese law, they breach Anthropic's terms of service, which explicitly ban Chinese companies from using its models.
Anthropic is stepping up efforts to close loopholes for AI access that have allowed Chinese companies to circumvent the company's stringent restrictions on unauthorized access to Claude AI in China. People familiar with the matter revealed that Chinese companies accessing Claude include Ant Financial and ByteDance, both of which have found creative workarounds to use the AI tools despite explicit bans
1
.The methods used don't violate US or Chinese law, but they breach Anthropic's terms of service, which specify that Chinese companies and foreign entities owned by them are prohibited from using its models. Anthropic maintains one of the strictest bans among US AI companies on usage in China, requiring user verification and banning payment from Chinese banks
1
.Ant Financial has provided employees with corporate Claude accounts accessed through the company's intranet, which connects to its Singapore-based entity. This use of overseas subsidiaries allows engineers based in mainland China to access the platform through their companies' internal networks
1
.ByteDance has taken a different approach. While the TikTok owner doesn't facilitate direct access to Claude, it introduced a reimbursement scheme this year allowing engineers to put personal subscriptions for the platform on their expenses, according to five employees. These engineers then access those subscriptions using VPNs
1
2
.Another route involves accessing Claude through Microsoft Azure cloud services via foreign subsidiaries. Microsoft sold API access to Chinese companies with Singapore-based entities, enabling this workaround. A person familiar with the practice described companies using overseas entities to access Claude as "a known issue" that's "not limited to any one provider"
1
.As part of Anthropic tightening restrictions, the company has targeted transfer station services, which relay requests from users in mainland China through Claude accounts registered overseas before returning responses. However, larger Chinese AI groups generally avoid these services because operators are widely suspected of storing or reselling prompts, creating concerns about data leaks. Executives worry rivals could analyze those requests to understand how they're using advanced models to improve their own systems
1
.Anthropic has constantly updated its tools to identify and take enforcement action as Chinese users develop new evasion techniques. The company has previously used Claude Code to look for clues such as a computer's timezone to detect whether a user was actually working from mainland China
1
2
.Related Stories
The efforts to access Claude from China illustrate the continuing value of leading US AI products to Chinese engineers despite growing access restrictions and the increased competitiveness of domestic models. Anthropic's coding tools are particularly popular among Chinese software engineers and AI startups because their outputs can be used for "distillation," in which smaller models are trained to mimic more capable ones
1
.This demand persists even though Beijing has banned its companies from using overseas models hosted in data centers outside the country to develop consumer applications because of restrictions on cross-border data flows. However, the regulation doesn't restrict Chinese AI labs from using foreign models for internal research and development purposes
1
.Anthropic stated it "explicitly prohibits accessing or facilitating access to Claude in unsupported regions, including China," adding that it's "the only frontier AI company that restricts sales to PRC-controlled companies, including subsidiaries incorporated outside China." The company enforces this policy through "continuous, evolving detection systems, working alongside our partners to identify and ban accounts that violate our policies"
1
. Microsoft confirmed that "Anthropic monitors use of the service and enforces their terms and conditions, with Microsoft's support"1
.Summarized by
Navi
05 Sept 2025•Technology

24 Jun 2026•Technology

29 Apr 2026•Business and Economy

1
Policy and Regulation

2
Policy and Regulation

3
Policy and Regulation
