Reverse-engineering shared on Reddit and user reports indicate that Anthropic's Claude service contained hidden client-side logic that was used to ban Chinese users in waves, including paid Max accounts. Suspension emails reportedly included a concealed tracking pixel that contributed to identifying accounts for action.
What the reverse engineering found
The Reddit post describing the reverse engineering says the relevant code does not rely on IP addresses. Instead, the client-side code reads the operating system timezone and checks the ANTHROPIC_BASE_URL environment variable against an obfuscated list of proxy and corporate domains. The list, according to the reverse-engineering write-up, includes domains associated with firms such as Alibaba and ByteDance.
When a match occurs, the client silently tags the request so the server can later identify and suspend the corresponding account. The reverse engineering also found a tracking pixel embedded in the suspension emails, which adds an additional identifier to requests.
How this differs from ordinary geoblocking
This method differs from standard geoblocking in several ways:
- It does not operate on IP address alone, so VPNs and simple IP-masking are not effective against it.
- The client-side code inspects local environment properties (for example, timezone and environment variables), allowing inference about the user's context.
- The tag is hidden in a way that avoids easy detection in logs or editors; reverse engineers describe this as comparable to steganography.
Taken together, these features mean the system profiles clients and reports a signal to the server that can trigger account suspension.
Implications and concerns
User reports and the reverse-engineered code indicate multiple users, including paying Max customers, were suspended. Because the detection relies on client-side signals rather than network location, common circumventions such as VPNs would not necessarily prevent tagging.
The findings raise ethical and privacy concerns: a company that markets itself on transparency deployed client-side code that fingerprints users and hid that behavior to avoid detection. While the reported labeling targeted China in these incidents, the same mechanism could in principle be repurposed against any group.
Summary
Reverse engineering of Claude Code and review of suspension messages suggest Anthropic's client-side implementation used timezone checks, ANTHROPIC_BASE_URL comparisons against an obfuscated domain list, and hidden tracking pixels to tag requests. That tagging was then used to identify and suspend accounts associated with China, a method that operates beyond simple IP-based geolocation and prompts questions about privacy, transparency, and client-side control.
