What is the AI gray market?
The AI gray market is the resale of access to AI models in places where the provider does not sell directly. Nothing is cracked or copied. A customer in a restricted country pays an intermediary, the intermediary sends the request through an account it holds elsewhere, and the answer comes back. The model is the real one.
That is what separates gray from black. Piracy is an unauthorized copy. This is authorized capacity, resold to someone the provider declined to serve.
How the routing works
Researcher Zilan Qian of the Oxford China Policy Lab documented the mechanics for Claude access in China, published in ChinaTalk in August 2026. Intermediaries there are called transfer stations, and the name describes the function precisely.
The transfer station holds a legitimate provider account, usually registered and billed abroad. It stands up an endpoint that customers inside China can reach, accepts payment in yuan through domestic channels, and forwards each request to the provider from its own overseas servers. From the provider’s side the traffic is one account with heavy usage. From the customer’s side it is an API that behaves like the official one, at up to 90 percent off list price.
Some resellers go further and wrap the endpoint so it mimics the official SDK, meaning application code needs no changes beyond a base URL.
Why the discount is that steep
A 90 percent discount is not a margin story, and reading it as ordinary arbitrage misses what is happening.
Part of it is real: volume pricing tiers, promotional credits, and capacity that would otherwise go unused. Part of it is cost avoidance, since a transfer station carries no support obligation, no compliance function and no liability it intends to honor.
The rest is risk priced in. An account that resells access is violating terms and will eventually be closed. Sellers who expect a short life sell cheap, take payment up front, and move to the next account. A steep discount is a signal about expected lifespan, not efficiency.
What the buyer actually gives up
The confidentiality is the part that surprises people. Every prompt and every response passes through the intermediary’s infrastructure under the intermediary’s credentials. There is no arrangement in which this is private. For a company routing internal documents or customer data through such an endpoint, the data has already left.
Continuity is the second loss. Access ends when the provider closes the account, without notice, and prepaid balances sit with a counterparty that has no incentive and often no legal exposure to refund them.
Auditability is the third. Usage logs, retention settings and model versions are whatever the intermediary says they are. A customer cannot verify which model actually answered.
Why it exists at all
Export controls and provider policy create a price and availability gap, and the gap gets filled. The demand is not exotic. Developers want the tools their competitors use, and the official channel is closed to them.
This is why the gray market is a policy signal rather than a crime story. It measures the distance between where a restriction is drawn and where demand actually sits, and it shows that access controls at the account layer are porous when the underlying service is reachable from anywhere with a credit card and a server.
Quick answers
Is the AI gray market illegal?
Gray is the operative word. The product is genuine and paid for at some point in the chain, which separates it from piracy. What it breaks is usually a contract term rather than a criminal statute: reselling access, misrepresenting location, or serving a jurisdiction the provider excluded. Consequences fall on the account, not usually on a court.
What is a transfer station?
A transfer station is the intermediary that holds the real provider account and resells access to it. Requests from customers inside the restricted market go to the transfer station's overseas infrastructure, which forwards them to the provider under its own credentials and returns the answer. To the provider, the traffic looks like one large legitimate customer.
Why is it 90 percent cheaper?
Several effects stack. Intermediaries buy on volume tiers and promotional credits, they resell capacity that would otherwise sit unused, they carry no support or compliance cost, and some accept the risk that an account is eventually closed with a balance on it. A discount that steep usually means the seller does not expect the account to last.
What are the risks of buying this way?
The intermediary sees every prompt and every response, because it holds the credentials and the traffic passes through its servers. Access can stop without warning when the provider closes the account, and prepaid balances are unlikely to be recoverable. For anything confidential, the confidentiality is gone by design.