An Inside Look at the Relay Market Powering Token Resellers and Fraud
Simon Willison · Simon Willison · 2026-07-26
Simon Willison summarizes a Matt Lenhard investigation revealing an underground market, primarily based in China, where operators resell LLM API tokens at a discount by pooling stolen credentials, abusing free trials, and exploiting unprotected endpoints, creating new risks for developers who expose LLM-powered applications publicly.
Extraction
Topics: llm-securityapi-abuseai-fraudllm-pricingtoken-reselling
Claims
- An underground market, operating primarily in China, resells LLM API tokens at significant discounts by pooling API credentials obtained through free trial abuse, unprotected support bot proxying, and stolen or charged-back credit cards.
- Resellers use open-source API proxy software — primarily one-api and its fork new-api — to load-balance requests across pools of compromised credentials.
- Buyers in these markets are motivated by cheaper token costs, circumventing geographic restrictions, and collecting data for model distillation.
- The existence of this organized marketplace substantially increases risk for developers who expose LLM-powered applications publicly, as finding new unprotected endpoints is now commercially incentivized.
- LLM API vendors need hard, configurable spending caps per API key to protect developers from unauthorized usage draining their budgets.
Key quotes
I've been cautious about exposing my own LLM-driven applications publicly out of fear of abuse leading to big token bills. The existence of this marketplace makes me even more cautious: there's now an entire ecosystem that can profit from finding a new unprotected endpoint to exploit.
I want my LLM apps to stop working the moment they hit a dollar threshold I've set for a period of time.