---
title: "揭秘LLM Token转售市场：欺诈与折扣背后的生态"
source: "Simon Willison 博客（Atom）"
source_tier: "t2"
url: "https://simonwillison.net/2026/Jul/26/relay-market/#atom-everything"
permalink: "https://feed.astralor.com/items/itm_cc1403ff4fc3a478720e4c64"
published: "2026-07-26T19:30:54.000Z"
score: 78
channel: "ai"
tags: ["AI安全","API代理劫持","LLM Token转售市场","one-api","欺诈攻击"]
---

# 揭秘LLM Token转售市场：欺诈与折扣背后的生态

## AI 点评

> 作为编辑，我认为这篇文章对所有使用LLM API的开发者都是一记警钟。它揭示了一个我们可能忽视的暗面：API密钥一旦暴露，就会被一个完整的黑色产业链盯上。尤其值得关注的是，转售商使用的恰恰是合法的开源代理工具，这使得防御变得更加困难。我强烈建议各位立即检查自己的API密钥限额设置，并考虑部署异常流量检测。对于运行公开AI服务的企业，这篇文章更是必读。

## 速览

Matt Lenhard 深入调查了围绕 LLM Token 转售形成的灰色市场。转售商通过开源代理软件（如 one-api 和 new-api）聚合来自各种渠道的 API 密钥，利用滥用免费试用、未经保护的支持机器人、盗刷信用卡或拒付攻击等方式，以大幅低于官方的价格转售 Token。该市场主要集中在中国，买家包括寻求廉价 Token、规避地理限制以及收集数据进行模型蒸馏的个人或组织。调查提醒 LLM 开发者必须严格设置 API 密钥使用上限，以防滥用导致巨额账单。

## 关键点

- 转售商通过开源代理（如 one-api、new-api）将多个 API 凭证池化，实现负载均衡和折扣转售。
- 欺诈手段包括滥用免费试用、利用未保护的支持机器人、盗刷信用卡及拒付攻击。
- 买家主要目的：获取廉价 Token、规避地理限制、收集数据用于模型蒸馏。
- LLM 开发者需为 API 密钥设置严格的使用上限，以防范此类滥用风险。

## 全文

An Inside Look at the Relay Market Powering Token Resellers and Fraud Fascinating investigation by Matt Lenhard into the market that has grown up around reselling LLM tokens at a discount by pooling API keys from various sources. This looks to be mostly a thing in China. Resellers sell access to an LLM proxy that offers significant discounts on regular API pricing, which they achieve by abusing free trials, proxying through unprotected support bots, or sometimes through stolen credit cards or chargeback attacks. The software they are using for these proxies is open source - mostly one-api and its more actively developed fork new-api, both legitimate API proxy products which can be used to load. balance requests across a pool of API credentials. The buyers are seeking cheap tokens, avoiding geo-restrictions, and in some cases collecting data for model distillation. I've been cautious about exposing my own LLM-driven applications publicly out of fear of abuse leading to big token bills. The existence of this marketplace makes me even more cautious: there's now an entire ecosystem that can profit from finding a new unprotected endpoint to exploit. LLM vendors really need to get better at offering strict caps for their API keys. I want my LLM apps to stop working the moment they hit a dollar threshold I've set for a period of time. Here's the (Chinese language) forum thread that served as the principal source for Matt's article. Via Hacker News Tags: ai, generative-ai, llms, llm-pricing, ai-ethics, ai-in-china

---

引用前请核对原文;本文由星际流动整理:https://feed.astralor.com/items/itm_cc1403ff4fc3a478720e4c64