Chinese internet users have found workarounds to access Anthropic's Claude AI assistant despite restrictions that block connections from mainland China, sparking a small but growing underground market for circumvention tools. The cat-and-mouse dynamic between geolocation barriers and those who bypass them reflects broader tensions between US tech export controls and the relentless demand for advanced artificial intelligence inside China's borders.
How the geolocation blocks work
Anthropic deploys IP-based geolocation filtering to enforce regional restrictions on Claude. When a user attempts to sign up or interact with the service from a flagged IP address, the system denies access and displays a message indicating the service is unavailable in their location. This filtering draws on databases that map IP addresses to geographic regions, flagging addresses registered to Chinese mainland internet service providers.
The restriction extends beyond China to Hong Kong, Macau, Iran, North Korea, Cuba, Syria, and Crimea. Anthropic's terms of service explicitly prohibit use from these jurisdictions, citing compliance with US export laws and trade sanctions. The company has not disclosed the technical methods it uses to detect and block circumvention attempts.
The workarounds Chinese users employ
Those seeking access have developed several methods to appear outside China. Virtual private network services remain the primary tool, routing traffic through servers in countries where Claude is accessible, such as the United States, Singapore, Japan, or Germany. Users connect to a VPN server first, then access Claude, effectively masking their actual location from Anthropic's systems.
Some users employ residential proxy networks, which route traffic through IP addresses assigned to real home internet connections in allowed countries. This method is harder to detect because the IPs belong to actual consumers rather than commercial data centre servers, which geolocation systems flag more readily.
The role of resellers and shared accounts
A secondary market has emerged around shared or resold accounts. Intermediaries with valid access create group accounts or sell invitation codes to Chinese users who cannot register directly. This approach lowers the cost per user, with some group plans charging as little as a few dollars per month for shared access rather than individual subscriptions.
These resale operations operate in a legal gray zone. In China, VPN services are restricted but widely used, with enforcement varying over time. Overseas providers serve Chinese customers openly, while domestic brokers often operate more discreetly through messaging platforms and informal networks.
Business implications for AI companies
The existence of workarounds complicates the economics of regional restrictions for AI companies. Claude's paid tiers, which Anthropic launched in 2023, represent potential revenue the company cannot capture directly from Chinese users due to sanctions compliance. However, the black or gray market for access means some of that demand is being met through unofficial channels.
This dynamic mirrors challenges faced by other US tech platforms in China, from search engines to social media. The pattern consistently shows that restrictions do not eliminate demand but rather shift it toward circumvention channels that are harder to monetise and monitor. For Anthropic, the question is whether the compliance costs of blocking China justify the revenue they could theoretically capture if they chose to operate there.
Market for VPN and proxy services
The demand from Chinese users seeking AI access adds to the market for VPN and proxy services in the region. Global providers like ExpressVPN, NordVPN, and Surfshark openly market their products to consumers worldwide, though they do not specifically target the AI access segment. Monthly subscription prices typically range from $8 to $15 for standard plans, with premium features commanding higher rates.
Smaller regional providers operate with lower profiles, offering servers optimised for AI platform access and marketing through Chinese-language channels. These services often accept payment methods accessible to Chinese users, including Alipay and WeChat Pay, facilitating transactions that larger international providers may avoid for compliance reasons.
Regulatory context and enforcement
China maintains its own restrictions on foreign internet services, requiring companies to obtain licenses to operate legally within the country. The government blocks access to many foreign platforms through the Great Firewall, creating an environment where users are accustomed to finding workarounds for internet restrictions in both directions.
Chinese authorities have periodically cracked down on unauthorised VPN services, arresting operators and imposing fines. However, the sheer scale of demand for unrestricted internet access has sustained a robust market despite enforcement actions. The emergence of AI access as a motivation adds a new dimension to this existing ecosystem.
What to watch next
Anthropic is reportedly developing more sophisticated geolocation detection methods, though the company has not announced specific timelines or technical details. The arms race between restriction and circumvention shows no signs of abating, with each side adapting to the other's moves. Investors watching Anthropic's expansion strategy should note that China represents a significant potential market that remains inaccessible under current compliance frameworks. Whether that changes depends on shifts in US export policy, Chinese regulatory attitudes toward AI, or Anthropic's own calculations about the risks and rewards of serving that market.





