\n<\/p>\n
Anthropic goes to<\/span> great lengths to prevent people in China from using its AI models, but in practice, its safeguards have often failed. Over the past year, startups, researchers, and tech enthusiasts across the country have developed increasingly sophisticated workarounds to access Claude. Many of them consider it the world\u2019s most capable AI assistant, making the extra effort to obtain it worthwhile.<\/p>\n In early June, Anthropic publicly released Fable 5, a safeguarded version of its most powerful AI model to date, Mythos. Chinese social media immediately lit up with posts from people sharing their impressions after trying it out. (Anthropic revoked access<\/a> to the model worldwide a few days later in response to export controls imposed by the Trump administration).<\/p>\n Chinese people generally can access other Western AI tools, such as OpenAI\u2019s ChatGPT, by using virtual private networks, foreign phone numbers, and international payment methods to create and maintain their accounts. But Anthropic has arguably taken more aggressive steps, such as banning accounts that it suspects are owned and controlled by people located in China. On Chinese social media, users frequently report that they have been suspended from Claude without warning, despite taking those precautions.<\/p>\n The cat-and-mouse game has fueled a thriving underground economy for Claude access in China. Accounts are sold on Chinese ecommerce platforms like Taobao and through illicit marketplaces on Telegram. More recently, a cottage industry of \u201ctransfer stations\u201d has also emerged. These services act as intermediaries, purchasing access to Anthropic\u2019s API outside China and then redistributing Claude API tokens to users inside the country. The set up is designed to give startups and other professional users more stable and reliable access to AI assistant.<\/p>\n Michael Aciman, a spokesperson for Anthropic, says that the company uses a range of evolving detection systems, including identity verification, to enforce its policies against unauthorized access to Claude. He added that Anthropic has also worked to detect and disrupt proxy networks used to provide access to the chatbot in China.<\/p>\n Despite all of the difficulties Chinese people are forced to overcome to use Claude, there remain many loyal fans of Anthropic in the country. It\u2019s especially popular among programmers. Even though Chinese companies like DeepSeek and Z.ai have some of the most capable open-source large language models on the market, third-party tests still show that they lag behind leading closed models like Claude. During a recent reporting trip to China, WIRED spoke to academics and engineers at multiple tech companies who said that they preferred using Claude over Chinese models to generate code, and are eager to try out each new model that Anthropic releases.<\/p>\n Zilan Qian, a research associate at the Oxford China Policy Lab, looked into the black market<\/a> for reselling Western AI tokens to Chinese users. He noted that Chinese software developers say they overwhelmingly prefer using tools like Claude Code and OpenAI\u2019s Codex compared to tools from domestic companies. \u201cAnalysis shows that Chinese models are still six to nine months behind the US models, and for specific things like coding and developing, you can obviously tell the gap,\u201d Qian says.<\/p>\n \u201cFor both Chinese AI policymakers and technical people, they have much less of a problem drawing on and using American ideas or products, regardless of the geopolitical or ideological rivalry,\u201d says Matt Sheehan, a senior fellow at the Carnegie Endowment for International Peace, where he researches AI policy and China. \u201cIt\u2019s Americans who tend to think an idea or a product is tainted just because it comes from their rival,\u201d he says.<\/p>\n Dario Amodei, Anthropic\u2019s cofounder and CEO, often explicitly<\/a> singles out Chinese access to frontier models as a critical threat to US national security. Just this week, Anthropic accused Alibaba<\/a> of using Claude outputs to train the Chinese company\u2019s rival models, a technique known as \u201cdistillation.\u201d Anthropic has also claimed<\/a> other Chinese companies have done the same thing in the past. For this and other national security reasons, Anthropic does not offer commercial access to Claude in China, or to subsidiaries<\/a> of Chinese companies located outside of the country.<\/p>\n<\/div>\n