Token brokers now resell AI credits at up to 80% off

The gray market for AI tokens has grown from scattered forum posts into storefronts, Telegram channels, and brokers offering $100,000 a day of API spend. A new investigation maps that economy end to end — and the discounts it documents are real enough to check yourself.

The brokers came to the inbox first

Security researcher Matt Lenhard spent weeks emailing the people who email him. His Vectoral investigation, which climbed onto the Hacker News front page this afternoon, started with founders telling him the same story: their inboxes are full of strangers offering to buy or sell API credits at steep discounts. One inbound pitch he reproduces opens "I have Millions of api credit" and proposes a long-term partnership. Another advertises direct relays to OpenAI and Claude at 40-50% below list price, requiring only an API key switch.

What Lenhard found behind those cold emails is a commercialized ecosystem, not a hobbyist scene. Dedicated credit marketplaces — AI Credits and AICreditMart — host seller listings for OpenAI, Anthropic, Google Gemini, Azure, and MiniMax credits at 30-80% off, with forms where sellers set their own discount and delivery method. "Bulk-discount" relay shops such as CheapCredits, Tokvana, and Neokens sell access to the same models through their own endpoints. Telegram channels with a few hundred subscribers advertise inventory; Reddit threads flog leftover OpenAI credits from YC Startup School and a $10,000 prepaid balance with an expiry date. One broker Lenhard contacted said his account could spend $100,000 a day — and rather than handing over provider keys, he routes requests through a proxy that draws from a pool of accounts. Lenhard's rough estimate: tens of millions of dollars of credits on offer across these channels.

Forty percent off, with a Terms of Service question mark

The most striking part is how openly the market operates. I checked the largest relay shop Lenhard names. CheapCredits is live, and its pricing page advertises a flat 40% off every model: GPT-5.5 output at $18 per million tokens against a $30 list price, Claude Opus 4.7 at $45 against $75. It describes a "drop-in relay": you point your code at the shop's endpoint and it forwards requests to OpenAI or Anthropic from a pooled account. Its FAQ even asks, in so many words, whether this violates the providers' terms of service — the closest thing to an answer is a footer note calling itself an "independent reseller."

The supply chain beneath those storefronts has three layers. Credit marketplaces match startups holding unused credits — accelerator grants, enterprise prepays, subscriptions they no longer need — with buyers who want them cheap. Relay operators pool accounts and meter access behind OpenAI-compatible endpoints built on open-source proxy panels. And at the bottom sits the fraud layer that makes the deepest discounts possible: stolen payment details funding subscription seats, free-trial harvesting, and resale of prompts and reasoning traces to labs that want to distill from frontier models.

That last point connects the gray market to front-page news of the past two months. In a June letter to the Senate Banking Committee, Anthropic alleged that operators affiliated with Alibaba ran roughly 25,000 fraudulent accounts through 28.8 million exchanges with Claude to extract capabilities — what it called the largest distillation attack it has documented; Alibaba has not publicly confirmed or denied the claims. In July, Anthropic began requiring identity verification at checkout, a step its own statements framed as abuse prevention and the security community read as a response to account farming. The token brokers are the retail face of that same economy: cheap access, subsidized by fraud, with the reasoning traces sold onward.

Who wins, who loses, and where the fraud lives

Startups and price-sensitive developers win on cost — 40% off list is real money for anyone running agent loops or batch pipelines. The brokers win, for now. The losers are more interesting. Providers lose price integrity and abuse-control dollars, but the bigger loss is architectural: a gray market that prices GPT-5.5-class output 40% below list becomes the reference price for a whole class of buyers, and every crackdown — KYC, device binding, account bans — just pushes relay shops onto fresh accounts. Enterprises that route production traffic through relays are the quietest losers: prompts cross infrastructure they don't control, which is a compliance and data-protection problem regardless of what a broker's GDPR boilerplate claims.

Skeptics have legitimate points about scale. "Tens of millions of dollars" is an estimate, much of the evidence is screenshots and cold emails, and the only hard numbers in the public record are Anthropic's own allegations. Some analysts argue the market's size is overstated and that the deepest discounts are loss-leaders or partially fake. Even so, the prices are independently verifiable — CheapCredits' page is live as of this afternoon — and the providers' behavior (ID checks, account sweeps) shows they treat the phenomenon as real. The unresolved question, posed by ARC Prize president Greg Kamradt when the market first surfaced: how often are cheap "Claude" or "GPT" tokens quietly cut with cheaper models? There is no public audit.

This is the shadow twin of a trend we've covered at the institutional level: CME to launch GPU rental futures as AI compute goes tradable and Nvidia backs $500B data center deal with GPU value guarantee treat compute as an investable asset class. The token gray market is the unregulated mirror image of that financialization at the API layer. Tokens have become a pseudo-currency — and currencies attract counterfeiting (stolen accounts) and laundering (relay proxies that obscure who is paying for what). The same reasoning traces that researchers cracked out of encrypted frontier APIs, a story we analyzed in depth, are precisely what distillation buyers pay the brokers for.

What to watch

First, whether providers fight the market or join it: official reseller and bulk programs would legitimize the discount channel, while KYC and device binding squeeze the fraud layer that makes the deepest discounts possible. Second, enterprise security teams: expect relay endpoints to start appearing on blocklists, the way cracked-software keys once did. Third, the distillation link — if cheap gray tokens keep feeding trace harvesting, this market stops being a pricing story and becomes part of the capability-transfer fight already reshaping export policy.

Would you point your production traffic at a 40%-off relay endpoint to cut your API bill? Tell us in the comments.

Sources: Vectoral — Who Are the Token Brokers? · Hacker News discussion · CheapCredits pricing page · explainx.ai — AI Token Black Market · Reuters — Anthropic's Alibaba distillation allegations · TrustDecision — The Token Arbitrage Economy