The Shadow Economy of LLMs: Token Resellers Exploit Generative AI Systems

A concerning trend has emerged in the generative AI space, with a marketplace developing for reselling discounted LLM tokens. This parallel economy operates by pooling API keys from various sources and offering them at significant discounts—sometimes through illicit means.

The practice appears particularly prevalent in China, where resellers offer access to LLM proxies that undercut official pricing. These discounts are achieved through methods such as exploiting free trials, routing requests through unprotected support bots, or even using stolen credit cards with chargeback attacks.

Technical Foundations of the Market

The infrastructure enabling this resale market relies on open-source API proxy tools like one-api and its active fork new-api. While these are legitimate products designed for load balancing across multiple API credentials, they’re being repurposed to facilitate unauthorized access.

Who’s Buying? And Why?

The demand side includes individuals and organizations seeking cheaper tokens, bypassing geographical restrictions, or collecting data for model distillation purposes. The anonymity afforded by proxy servers further fuels this ecosystem.

This development raises concerns about the security of AI infrastructure and the potential for malicious use as attackers actively seek new vulnerabilities to exploit.