Anthropic Tightens Access Controls Against Chinese Engineers

Anthropic has long maintained one of the strictest access bans among U.S. AI companies toward China, but the company now faces a gap between its policy and enforcement. Chinese enterprises—particularly Ant Financial and ByteDance—have systematically found ways to work around the restriction by routing access through third-country entities and personal subscription schemes. These tactics exploit Anthropic's enforcement surface area: the workarounds are not illegal under U.S. or Chinese law, so Anthropic must rely on its own detection and account termination capabilities rather than legal intervention.

The particular appeal of Claude for Chinese engineers points to a strategic concern beyond simple access: Claude Code's ability to generate outputs suitable for distillation—where smaller, cheaper models are trained to replicate the behavior of more capable ones—makes it valuable for cost-conscious AI development. Larger Chinese AI groups have notably avoided third-party relay services out of fear that operators may store or resell prompts, suggesting they maintain at least some awareness of operational risk even as they seek alternative pathways. Anthropic's reliance on continuously evolving detection systems suggests this has become an ongoing technical and operational challenge rather than a one-time closure.