- China continues to eliminate both demand for AI chips from its ecosystem and foreign AI models, citing “security risks” and privacy concerns.
- The harshest warnings come from China’s Ministry of State Security (MSS).
- US companies continue to flock to cheaper alternatives for their AI needs
In what many may see as a tit-for-tat response to the increasing tightening of US controls and sanctions on AI hardware and software service providers, and acquisitions across the board, Chinese authorities increasingly appear to be targeting greater unbundling of US-based suppliers, citing security concerns for users who take advantage of gray market access to frontier models like Anthropic’s Fable.
China’s Ministry of State Security (MSS), responsible for domestic and foreign intelligence and surveillance operations, has warned that users who leverage third-party tools and marketplaces to access highly sought-after computing resources from US-based AI models may be exposing themselves to security risks and potential backdoors for cyber espionage.
He pointed to inadequate encryption, bait-and-switch models and even potential data retention as key concerns, aligning with the narrative of many US-based security agencies that sprang into action once models like DeepSeek began to gain traction in domestic markets.
Concerns about AI abuse are growing on both fronts
While the Chinese and US governments are increasingly hostile to foreign AI, citing them as security threats, US consumers continue to use models such as Alibaba’s advanced Qwen 3.6, DeepSeek V4 Pro, and GLM 5.1, all of which offer open source models that enable localized AI, as well as hosted inference options cheaper than what OpenAI and Anthropic currently charge for their services.
The reason comes down to one simple factor: cost. Distilled models like those offered by DeepSeek not only cost a fraction of their peers, but can also be implemented without any licensing costs on existing hardware, even as models become increasingly larger and more complex in terms of computing power and memory requirements.
This hasn’t stopped Chinese developers and AI enthusiasts from doing the exact opposite, looking for the cheapest way to access US-based AI models and their computation at a fraction of the cost, regardless of the trade-offs involved.
Research published in May 2026 by Zilan Qian of the Oxford China Policy Lab documented a thriving ecosystem of API “transfer stations”: proxy services that operate openly on Taobao, GitHub, and Telegram and resell access to Anthropic’s Claude models at just a tenth of the official price.
The listings advertise unlimited subscriptions to Claude Code, full access to Claude Opus, multi-million token contextual windows (no VPN required), and RMB payments via WeChat or Alipay.
The economics only work because the product is rotten on the inside: accounts registered en masse getting free credits, subscriptions split between dozens of users, credentials purchased with stolen credit card data – which does indicate that Chinese authorities are warning about a trend that is becoming both a security and financial risk for all parties involved.
This, coupled with the fact that the White House continues to accuse Chinese developers of jailbreaking or stealing data from American AI models, indicates that the issue is delicate as both countries compete for the coveted position of being the first to chart a path to AGI (Artificial General Intelligence).
A message from Chinese security services, such as the MSS, in this context implies that as US consumers continue to adopt technology from the region, Chinese consumers may face future restrictions, with advisories such as the one provided often backed by covert and overt actions by state agencies to ensure compliance.
An example of how this could work can be found in the domestic chip market: while there is no blanket ban on the import of Nvidia GPUs for AI training and inference workloads from the Chinese state, the country widely discourages such imports, which has led to some interesting observations from Huawei’s president after the initial heavy-handedness by US authorities when it came to export permits for high-end AI chips from Nvidia and AMD.
China now continues to build, upgrade and redesign its chip and memory manufacturing sectors on a war footing, much to the chagrin of Nvidia CEO Jensen Huang.
Both countries can see their counterparts’ users as a win for their AI models for now; Additional users, and therefore consultations, allow for more training and information, which allows for the refinement of both security issues, such as jailbreaking, as well as access to a large amount of information from end users, which strengthens the cognitive capabilities of frontier AI models.
As things stand, while American consumers continue to enjoy access to Chinese AI models, the US government could also, in the near future, push harder than it already has when it comes to imposing enhanced restrictions on users seeking to use “foreign AI” while battle lines continue to be drawn, even as China appears to be preventing such a move using the same narrative.
Follow TechRadar on Google News and add us as a preferred source to receive news, reviews and opinions from our experts in your feeds.
