The model-swapping section is the most interesting part. The CISPA finding — 37% vs 83.82% on benchmarks — is stark. But what's striking is that the market corrects around it: the proxies that actually route to Claude are more expensive, and there's a segment of Chinese developers who specifically seek those out. Not just cost arbitrage; they need the capability gap.
The deeper irony is that tighter access control may not eliminate demand. It may simply professionalize the gray market around that demand.
If Chinese developers, researchers, and companies still want Claude, but the official channel is blocked or unstable, the market will not disappear. It will reroute. The result is not necessarily less access, but less visible access: more intermediaries, weaker accountability, more data leakage, and a larger incentive to monetize logs.
This is why the problem is bigger than China or Claude. AI access is becoming a political economy of channels. Whoever controls the model matters. But whoever controls the routing layer, payment layer, identity layer, and user logs may matter almost as much.
The V2EX angle here adds texture. V2EX (China's primary developer forum, ~1M monthly actives) has daily threads on Claude Code workflows, API proxy recommendations, and transfer station quality reviews. The participant profile matches exactly what you describe: SaaS builders, CS students, indie devs. Not researchers trying to catch up. The meta-commentary is visible in real-time, users tracking which proxies have reliable uptime, which ones silently rate-limit, which break when Anthropic tightens verification.
The Singapore routing is in the data too. SG consistently recommended on tech forums as the lowest-latency, most stable path. The 'Singapore leads per capita Claude use' stat is not accidental. There's a whole infrastructure of Alibaba Cloud SG instances behind that number.
Russia has similar marketplaces advertising access to LLMs that residents of that country wouldn't be able to access due to sanctions (see: plati.market). Do you think that this configuration could be how Russian sellers are providing access to buyers?
The transfer-station economy reframes how export controls actually work. Geoblock and KYC treat access as binary, but proxies turn it into a price curve. At 10% of official pricing, the demand reads more like ordinary developer adoption than fraud. Each new control layer produces a matching evasion layer.
You caught the part that really matters—the payment rail. Not the API endpoint, not the model version, but the WeChat QR code that turns a service ban into a market. That's the fracture zone. Let me add a layer you didn't name directly: this isn't an evasion pattern unique to AI. It's the same architecture China's shadow commodity trade has run on for two years. I've argued in "The Physics of Shadow Trade" that when official trade lanes severed, the real economy rebuilt its own plumbing—third-country transshipment, renminbi settlement, and a parallel documentation universe. Now that same template is being stamped onto compute: Claude tokens aren't classified as "chips" or "code,
【The AI Trap: Washington Locked Itself Out—China Walked In】
Another day another Zilan banger
Pretty telling traveling in China how they’re all Claude pilled
wonderful piece - thank you zilan; i learned a lot
This is so interesting. I learn so much from you
Fascinating.
The model-swapping section is the most interesting part. The CISPA finding — 37% vs 83.82% on benchmarks — is stark. But what's striking is that the market corrects around it: the proxies that actually route to Claude are more expensive, and there's a segment of Chinese developers who specifically seek those out. Not just cost arbitrage; they need the capability gap.
The deeper irony is that tighter access control may not eliminate demand. It may simply professionalize the gray market around that demand.
If Chinese developers, researchers, and companies still want Claude, but the official channel is blocked or unstable, the market will not disappear. It will reroute. The result is not necessarily less access, but less visible access: more intermediaries, weaker accountability, more data leakage, and a larger incentive to monetize logs.
This is why the problem is bigger than China or Claude. AI access is becoming a political economy of channels. Whoever controls the model matters. But whoever controls the routing layer, payment layer, identity layer, and user logs may matter almost as much.
The V2EX angle here adds texture. V2EX (China's primary developer forum, ~1M monthly actives) has daily threads on Claude Code workflows, API proxy recommendations, and transfer station quality reviews. The participant profile matches exactly what you describe: SaaS builders, CS students, indie devs. Not researchers trying to catch up. The meta-commentary is visible in real-time, users tracking which proxies have reliable uptime, which ones silently rate-limit, which break when Anthropic tightens verification.
The Singapore routing is in the data too. SG consistently recommended on tech forums as the lowest-latency, most stable path. The 'Singapore leads per capita Claude use' stat is not accidental. There's a whole infrastructure of Alibaba Cloud SG instances behind that number.
Russia has similar marketplaces advertising access to LLMs that residents of that country wouldn't be able to access due to sanctions (see: plati.market). Do you think that this configuration could be how Russian sellers are providing access to buyers?
The transfer-station economy reframes how export controls actually work. Geoblock and KYC treat access as binary, but proxies turn it into a price curve. At 10% of official pricing, the demand reads more like ordinary developer adoption than fraud. Each new control layer produces a matching evasion layer.
Somehow I found this not much different from Chinese buying iPhones in early days.
Consumers will get what they want.
Let’s grow together by supporting one another if you’re also new on Substack, feel free to subscribe and I’ll gladly do the same.
You caught the part that really matters—the payment rail. Not the API endpoint, not the model version, but the WeChat QR code that turns a service ban into a market. That's the fracture zone. Let me add a layer you didn't name directly: this isn't an evasion pattern unique to AI. It's the same architecture China's shadow commodity trade has run on for two years. I've argued in "The Physics of Shadow Trade" that when official trade lanes severed, the real economy rebuilt its own plumbing—third-country transshipment, renminbi settlement, and a parallel documentation universe. Now that same template is being stamped onto compute: Claude tokens aren't classified as "chips" or "code,
【The AI Trap: Washington Locked Itself Out—China Walked In】
https://chinarbitrageur.substack.com/p/the-ai-trap-washington-locked-itself?r=71ctq6