Researchers have found online service Poison Claude reselling access to Anthropic’s premium AI models at a significant discount with suspicions that these discounts are coming from fraudulently registered cloud accounts filled with free bonus credits.
More details here: https://www.okta.com/blog/threat-intelligence/free_tokens_for_sale/
Dave Hayes, VP of Product at cybersecurity company FusionAuth, commented:
“The instinct is for Anthropic to hunt down the fake accounts and shut them off preemptively instead of waiting for the “customer” to contest the charge. You’ll mostly come up empty, because there’s no break-in to find. The account signed up, cleared the check, and spent its credits, exactly what it was authorized to do.
The real exploit is the gap between how little it takes to prove who you are and how much value that unlocks. A thin signup check is all that stands between someone and $100 to $350,000 in credits. The only lever that works is upstream.
Stop tying the credits to the signup, and make releasing the money a separate, deterministic decision sized to what’s at stake. Right now the resale price is the market telling you what that gap is worth: 5 to 15 cents on the dollar.”
There is a rush to do things with AI as quickly as possible. People really need to stop and think about it as not everything is golden when you look at it.
Related
This entry was posted on August 8, 2026 at 4:01 pm and is filed under Commentary with tags Anthropic. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Poison Claude Selling Discounted AI Tokens Built on Fake Accounts and Free Credits
Researchers have found online service Poison Claude reselling access to Anthropic’s premium AI models at a significant discount with suspicions that these discounts are coming from fraudulently registered cloud accounts filled with free bonus credits.
More details here: https://www.okta.com/blog/threat-intelligence/free_tokens_for_sale/
Dave Hayes, VP of Product at cybersecurity company FusionAuth, commented:
“The instinct is for Anthropic to hunt down the fake accounts and shut them off preemptively instead of waiting for the “customer” to contest the charge. You’ll mostly come up empty, because there’s no break-in to find. The account signed up, cleared the check, and spent its credits, exactly what it was authorized to do.
The real exploit is the gap between how little it takes to prove who you are and how much value that unlocks. A thin signup check is all that stands between someone and $100 to $350,000 in credits. The only lever that works is upstream.
Stop tying the credits to the signup, and make releasing the money a separate, deterministic decision sized to what’s at stake. Right now the resale price is the market telling you what that gap is worth: 5 to 15 cents on the dollar.”
There is a rush to do things with AI as quickly as possible. People really need to stop and think about it as not everything is golden when you look at it.
Share this:
Like this:
Related
This entry was posted on August 8, 2026 at 4:01 pm and is filed under Commentary with tags Anthropic. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.