- China continues to remove both demand for AI chips from its ecosystem and foreign AI models, citing “security risks” and privacy concerns
- The sharpest warnings come from China’s Ministry of State Security (MSS)
- American companies continue to flock to lower-cost alternatives for their AI needs
In what many may see as a clean response to increased US tightening of controls and sanctions against both AI hardware and software providers, and procurement across the board, Chinese authorities appear to be increasingly pointing to further separation from US-based providers, citing security concerns for users exploiting gray market access to frontier models such as F Anthropic’.
China’s Ministry of State Security (MSS), responsible for both domestic and foreign intelligence operations and surveillance, has warned that users who leverage third-party tools and marketplaces to access highly sought-after computing resources from US-based AI models could be exposing themselves to security risks and potential backdoors for cyberespionage.
It pointed to inadequate encryption, bait-and-switch models and even the potential storage of data as key concerns, echoing the narrative of many U.S.-based security agencies that stepped in as models like DeepSeek began to gain traction in domestic markets.
Concerns about AI misuse are rising on both fronts
While both the Chinese and US governments are increasingly hostile to foreign AI, citing them as security threats, US consumers continue to use models such as Alibaba’s advanced Qwen 3.6, DeepSeek V4 Pro and GLM 5.1, all of which offer open source models that allow for localized AI as well as cheaper hosted inference options than what OpenAI currently charges for their services.
The reason boils down to one simple factor: cost. Not only do distilled models like those offered by DeepSeek cost a fraction of their peers, but they can also be deployed without any licensing costs on existing hardware, even as models become increasingly large and complex in terms of computing power and memory requirements.
This hasn’t stopped Chinese developers and AI enthusiasts from doing the exact opposite, looking for the cheapest way to access US-based AI models and their computations at a fraction of the cost, regardless of the trade-offs involved.
Research published in May 2026 by Zilan Qian of the Oxford China Policy Lab documented a thriving ecosystem of API “transfer stations” – proxy services operating openly on Taobao, GitHub and Telegram that resell access to Anthropics Claude models for as little as a tenth of the official price.
Listings advertise unlimited Claude Code subscriptions, full-fat Claude Opus access, million-token context windows (no VPN required), and payment in RMB via WeChat or Alipay.
The economy only works because the product is rotten underneath: mass registered accounts with free credits, subscriptions spread over dozens of users, credentials bought with stolen credit card data, indicating that Chinese authorities are warning of a trend that is becoming both a security and a financial risk for all parties concerned.
This, combined with the fact that the White House continues to accuse Chinese developers of ‘jailbreaking’ or stealing data from US AI models, indicates that the issue is tenuous as both countries vie for the coveted position of being the first to chart a path to AGI (Artificial General Intelligence).
In this context, an announcement from Chinese security services such as MSS implies that while US consumers continue to embrace technology from the region, Chinese consumers may face future restrictions, with advice such as that provided often backed by covert and overt actions by government agencies to ensure compliance.
An example of how this could work can be found in the domestic chip market: While there is no blanket ban on importing Nvidia GPUs for AI training and inference workloads from the Chinese state, the country largely discourages such imports, which has led to some interesting observations from Huawei’s chairman after the initial crackdown by US authorities when it came to export permits for Nvidia’s top AMD chips.
China now continues to build, upgrade and redesign both its chipmaking and memory sectors on a war footing, much to the chagrin of Nvidia CEO Jensen Huang.
Both countries may see users from their counterparts as a victory for their AI models so far; additional users, and therefore queries, allow for more training and information to be imparted, allowing for the perfection of both security issues such as jailbreaking, and also access to a wealth of information from end users, strengthening the cognitive capabilities of frontier AI models.
As things stand, while US consumers continue to benefit from access to Chinese AI models, the US government may also in the near future push further than it already has when it comes to enforcing enhanced restrictions on users aiming to use ‘foreign AI’, as battle lines continue to be drawn, although China appears to be preempting such a move using the same narrative.
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds.
