---
title: "Inside the LLM Token Resale Market: Fraud and Discounts Behind the Ecosystem"
source: "Simon Willison 博客（Atom）"
source_tier: "t2"
url: "https://simonwillison.net/2026/Jul/26/relay-market/#atom-everything"
permalink: "https://feed.astralor.com/items/itm_cc1403ff4fc3a478720e4c64"
published: "2026-07-26T19:30:54.000Z"
score: 78
channel: "ai"
tags: ["AI Security","API Proxy Hijacking","LLM Token Resale Market","one-api","Fraud Attack"]
---

# Inside the LLM Token Resale Market: Fraud and Discounts Behind the Ecosystem

## AI commentary

> As an editor, I believe this article is a wake-up call for every developer consuming LLM APIs. It reveals a dark side we might overlook: once an API key is exposed, it becomes a target for a complete black-market ecosystem. Notably, resellers use legitimate open-source proxy tools, making defense trickier. I strongly urge everyone to immediately review their API key cap settings and consider deploying anomaly detection. This piece is a must-read for companies running public AI services.

## At a glance

Matt Lenhard's investigation reveals a gray market for reselling LLM tokens at deep discounts. Resellers use open-source proxy software like one-api and new-api to pool API keys from various sources, abusing free trials, unprotected support bots, stolen credit cards, or chargeback attacks. This market is predominantly based in China, with buyers seeking cheap tokens, bypassing geo-restrictions, or collecting data for model distillation. The report warns LLM developers to enforce strict API key caps to avoid abuse and huge bills.

## Key points

- Resellers pool API credentials using open-source proxies (e.g., one-api, new-api) to load balance and resell at a discount.
- Fraud tactics include abusing free trials, exploiting unprotected support bots, stolen credit cards, and chargeback attacks.
- Buyers seek cheap tokens, bypass geo-restrictions, or collect data for model distillation.
- LLM developers must set strict usage caps on API keys to mitigate such abuse risks.

## Full text

An Inside Look at the Relay Market Powering Token Resellers and Fraud Fascinating investigation by Matt Lenhard into the market that has grown up around reselling LLM tokens at a discount by pooling API keys from various sources. This looks to be mostly a thing in China. Resellers sell access to an LLM proxy that offers significant discounts on regular API pricing, which they achieve by abusing free trials, proxying through unprotected support bots, or sometimes through stolen credit cards or chargeback attacks. The software they are using for these proxies is open source - mostly one-api and its more actively developed fork new-api, both legitimate API proxy products which can be used to load. balance requests across a pool of API credentials. The buyers are seeking cheap tokens, avoiding geo-restrictions, and in some cases collecting data for model distillation. I've been cautious about exposing my own LLM-driven applications publicly out of fear of abuse leading to big token bills. The existence of this marketplace makes me even more cautious: there's now an entire ecosystem that can profit from finding a new unprotected endpoint to exploit. LLM vendors really need to get better at offering strict caps for their API keys. I want my LLM apps to stop working the moment they hit a dollar threshold I've set for a period of time. Here's the (Chinese language) forum thread that served as the principal source for Matt's article. Via Hacker News Tags: ai, generative-ai, llms, llm-pricing, ai-ethics, ai-in-china

---

Verify against the original before citing; curated by Astral Feed: https://feed.astralor.com/items/itm_cc1403ff4fc3a478720e4c64