--- title: An Inside Look at the Relay Market Powering Token... description: A firsthand investigation into the gray-market ecosystem of AI token relay services operating primarily out of mainland China. These 'transfer stations' proxy... canonical: https://daily.dev/posts/an-inside-look-at-the-relay-market-powering-token-resellers-and-fraud-njahgl92o twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: An Inside Look at the Relay Market Powering Token Resellers and Fraud | daily.dev og:description: A firsthand investigation into the gray-market ecosystem of AI token relay services operating primarily out of mainland China. These 'transfer stations' proxy... og:url: https://daily.dev/posts/an-inside-look-at-the-relay-market-powering-token-resellers-and-fraud-njahgl92o og:image: https://api.daily.dev/og/posts/Njahgl92o.png og:image:alt: An Inside Look at the Relay Market Powering Token Resellers and Fraud og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # An Inside Look at the Relay Market Powering Token Resellers and Fraud **[Hacker News](https://daily.dev/sources/hn)** · 9 min read · 2 upvotes · 0 comments ## Summary A firsthand investigation into the gray-market ecosystem of AI token relay services operating primarily out of mainland China. These 'transfer stations' proxy traffic to OpenAI, Anthropic, and Google APIs at discounts of 94–98% off official pricing by aggregating stolen, leaked, or fraudulently obtained API keys. The piece maps the four-layer supply chain — from virtual card merchants and bulk account sellers, through account pools, to consumer-facing relay products — and identifies the open-source tools (one-api, new-api) powering most operations. Abuse methods covered include free-trial farming, chargeback attacks, prepaid card exploitation, open inference hijacking, and denial-of-wallet attacks. The market serves millions of monthly visitors and has matured to include price-comparison sites, affiliate programs, and even daily API key lotteries. Defensive recommendations for AI providers include friction at account creation, behavioral anomaly detection, account clustering, spend caps, and quiet throttling of detected abusers. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community take How the wider developer community reacted, aggregated from 1 discussion and 116 comments across hackernews (as of 2026-07-26). **TL;DR:** The community is divided on whether AI token reselling constitutes genuine fraud/theft or merely a grey-market arbitrage opportunity, with heated debate over the ethics, legality, and technical mechanics of the practice. Many commenters are skeptical of AI providers' ability to combat it, while others see it as an inevitable consequence of loss-leader subscription pricing. **Sentiment:** 15% positive · 45% mixed · 40% skeptical **The case for** - Some commenters argue that reselling legitimately purchased subscription tokens is not inherently unethical, comparing it to other grey-market arbitrage. - Geo-restricted users benefit from resellers circumventing access bans, which some see as morally defensible. - The subscription pricing model itself is seen as the root cause, with fixed-cost-per-token pricing suggested as a cleaner solution. **The pushback** - At scale, token reselling likely involves credit card fraud, chargeback abuse, or mass free-trial exploitation. - Resellers may silently substitute cheaper/inferior models (e.g., Sonnet instead of Opus), giving buyers no way to verify what they're getting. - Abuse degrades service and drives up costs or restrictions for legitimate individual subscribers. - The relay infrastructure creates a surveillance risk, as operators could monitor all traffic passing through their proxies. **By community** - hackernews (mixed): Commenters are split between viewing token reselling as outright fraud versus a grey-market arbitrage enabled by AI companies' own loss-leader pricing strategies, with no clear consensus on ethics or legality. **Hottest debate:** Whether token reselling constitutes criminal fraud/theft or merely a civil breach of contract (or even legitimate arbitrage) is the most contested point, with commenters repeatedly talking past each other on the legal definitions. **Open questions** - How can buyers verify they are receiving the model they paid for and not a cheaper substitute? - Would fixed-cost-per-token pricing eliminate the arbitrage opportunity entirely? - Are AI providers actually able to detect and consolidate accounts operated by the same actor, and do they choose not to act? - Do relay operators harvest and resell agent traces as training data to AI companies? **Highlights** > the way i see it there are 3 types of resellers. the ones using fake credit cards to rack up costs and then cancel the card are doing actual fraud. then you got mass free trial abuse which is more of a gray area and i would say its still wrong. but if you sign up for a subscription, pay for it and resell your monthly tokens thats not at all unethical, even if its breaking their terms and costing the provider money. imagine ford starts renting out company cars at a huge discount so they can get people to buy the same model for themselves after they drive it at work. its the exact same car and costs the same amount to make, they just take a loss on it and use by anyone other than employees is banned in the contract. some small company realizes they dont really use their cars that much so they rent them out again for 3 days a week to get some extra cash. is that fraud? it costs ford nothing because they get the same payments either way, they just lose potential profits. they are the ones who decided to set up a loss leader and take the risk of someone "abusing" the system so we dont need to use public resources to defend their strategy. that wastes taxpayer money to protect corporate profits, and it creates moral hazard because ford (anthropic) is not the one paying for enforcement. > — [tancop on hackernews · 3 comments](https://news.ycombinator.com/item?id=49062034) > It's the same fundamental problem as "ticket touting" for popular events - if you sell something that's in demand at a price that's far lower than the clearing price of the market, you're creating a juicy arbitrage opportunity that sooner or later somebody is going to try and exploit > — [ifwinterco on hackernews · 1 comments](https://news.ycombinator.com/item?id=49061819) > The real problem is subscription models. Businesses want recurring revenue so they try to game the ratio of fixed subscription prices to COGS but it's always a game and so whoever can figure out the upside for the company can figure out the complementary upside for themselves. How would one even word a bulletproof subscription contract for agentic tokens, anyway? You can't forbid automation because sub-agents are automation. You could forbid "using tokens for the benefit of more than the human who signed up" but then what do families (especially with kids) need to do? What if your friend asks you a question and you turn to a chat model? Forbidding "reselling" tokens outside of a household sounds like the closest terms but that's leaky for anyone who travels a lot, etc. Fixed cost per token simply works. > — [benlivengood on hackernews · 3 comments](https://news.ycombinator.com/item?id=49060031) > > some small company realizes they dont really use their cars that much so they rent them out again for 3 days a week to get some extra cash. is that fraud? Most likely, yes. There's a common fallacy that once you pay someone for a service, you are free to do whatever you want with that service. In the case of the rental car, the contract the company entered into would prohibit reselling the services and limit who can drive them and for what purposes. Some people see these limitations and scream "Not fair! They paid money, they can do whatever they want!" The misunderstanding is that the price they paid was predicated on the specific use. They got a lower price for the rentals because the provider calculated the expected use case and priced it according to that. If the small company starts renting out the cars to try to maximize how much they're used, that breaks the financial model. That's why this type of use is forbidden in every basic rental contract. It's the same reason why you can't rent an apartment building and then turn it into an AirBnB. On a smaller scale, it's why you can't go to an all-you-can-eat buffet and load up on food to carry outside to your 5 hungry friends. This type of pricing is everywhere. There is a vocal online minority who believe user license agreements shouldn't be enforced and individuals should never be considered accountable for following them, but that doesn't even apply to these resellers. This isn't a lowly individual user trying to get back $10 from their $20 per month plan that was going unused. There's no way to even achieve the scale and discounts without mass, automated fraud. They're doing chargeback fraud or using stolen credit cards. It's not even a crime where the big corporation is the only victim. The higher the volume of fraud on the subscription accounts, the less real usage you and I get for our dollar. These people are jumping on the accounts targeted to individuals like us and abusing them to sell tokens to big corporations trying to abuse them at scale. People like you and I lose when these accounts get their limits reduced or the companies start introducing ID checks and KYC just to use basic services. > — [Aurornis on hackernews · 1 comments](https://news.ycombinator.com/item?id=49062719) > This is the problem we've been working on solving with WorkOS Radar. We run it for Cursor and a bunch of other AI companies who have a free trial that gives some free inference to test the product. It turns out to be a pretty complex program to solve at scale. Token fraud is a lucrative market and the adversaries are surprisingly sophisticated. It's a cat-and-mouse game, accelerated with AI. https://workos.com/radar (If you'd like to work on this, we are hiring :)) > — [grinich on hackernews · 1 comments](https://news.ycombinator.com/item?id=49060979) **Source threads** - [hackernews](https://news.ycombinator.com/item?id=49058993) · 76 points · 116 comments ## Similar posts on daily.dev - [The Dark Side of $1 AI: Inside the Underground Market for Pirated AI Access](https://daily.dev/posts/the-dark-side-of-1-ai-inside-the-underground-market-for-pirated-ai-access-bskrrdm2s) · Medium · 0 upvotes · 0 comments - [Cheap AI Token Resellers: The Secret Ingredient Is Fraud](https://daily.dev/posts/cheap-ai-token-resellers-the-secret-ingredient-is-fraud-aed5vypx1) · Hackaday · 0 upvotes · 0 comments - [Token Jacking: Cybercriminals Could Be Stealing Your AI Resources](https://daily.dev/posts/token-jacking-cybercriminals-could-be-stealing-your-ai-resources-os316gpzk) · Unit 42 · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#openai](https://daily.dev/tags/openai), [#fraud-detection](https://daily.dev/tags/fraud-detection) [View this post on daily.dev](https://daily.dev/posts/an-inside-look-at-the-relay-market-powering-token-resellers-and-fraud-njahgl92o) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"An Inside Look at the Relay Market Powering Token Resellers and Fraud","url":"https://daily.dev/posts/an-inside-look-at-the-relay-market-powering-token-resellers-and-fraud-njahgl92o","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/an-inside-look-at-the-relay-market-powering-token-resellers-and-fraud-njahgl92o"},"datePublished":"2026-07-26T16:58:12.019Z","dateModified":"2026-07-26T22:57:50.562Z","description":"A firsthand investigation into the gray-market ecosystem of AI token relay services operating primarily out of mainland China. These 'transfer stations' proxy...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f8cf5d5d43c0f27c7346504b58bf0b3a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/f8cf5d5d43c0f27c7346504b58bf0b3a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/an-inside-look-at-the-relay-market-powering-token-resellers-and-fraud-njahgl92o","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,openai,fraud-detection","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"An Inside Look at the Relay Market Powering Token Resellers and Fraud"}]} ```