An Inside Look at the Relay Market Powering Token Resellers and Fraud
A shadow market resells stolen or abused LLM API tokens at discount, primarily in China.
“there's now an entire ecosystem that can profit from finding a new unprotected endpoint to exploit”
An investigation reveals a thriving relay market, mostly in China, where resellers pool LLM API keys obtained through free trial abuse, compromised support bots, and stolen credit cards to offer discounted token access. Buyers use these proxies to avoid geo-restrictions and collect data for model distillation. The ecosystem highlights a systemic gap in LLM vendor controls, with Simon Willison calling for hard spending caps on API keys to limit abuse exposure.