Identity verification protocols for advanced AI services have inadvertently spurred a global shadow supply chain, where residents in countries like Cambodia and Kenya are recruited to provide biometric data for less than $30. When companies such as Anthropic implement rigorous security controls—including biometric KYC (know-your-customer identity verification)—they create an adversarial loop. These controls drive black-market actors to hire individuals to complete in-person verification steps, effectively harvesting real faces for databases that are subsequently resold for deepfake creation, fraudulent banking, or blackmail. This cycle mirrors earlier patterns observed in the Worldcoin black market, where iris scans were similarly traded for minimal cash payments.

The visibility of this supply chain increased significantly following the shutdown of Fable 5 and Mythos 5 on June 12, 2026. Anthropic terminated access to these models globally after a US government export control directive was issued at 5:21pm, citing an inability to differentiate between domestic and international users in real-time. As of June 27, 2026, Mythos was restored exclusively for critical infrastructure organizations authorized by the US government, while general developers remain locked out. These geopolitical restrictions have created a lucrative market for API proxies, particularly on platforms like GitHub and Telegram, where developers gain access to models at 10% of official costs.

According to research documented in May 2026 by Oxford researcher Zilan Qian, this transfer station economy relies on three mechanisms: bulk-registered account arbitrage, model swapping where users receive inferior models instead of those paid for, and data logging. These proxy operators often capture every prompt, response, and reasoning trace, monetizing user data and engineering logs to offset the costs of maintaining verified accounts. The human toll of these systems is disproportionately borne by individuals in regions with weaker legal protections. While policymakers in Brussels and San Francisco debate the merits of export controls and AI access, the external costs—including the permanent harvesting of biometric identities—are passed down to the Global South, creating an inescapable cycle of exploitation where the original identity subjects bear the long-term legal and reputational consequences of transactions they never authorized.

Identity verification protocols for advanced AI services have inadvertently spurred a global shadow supply chain, where residents in countries like Cambodia and Kenya are recruited to provide biometric data for less than $30. When companies such as Anthropic implement rigorous security controls—including biometric KYC (know-your-customer identity verification)—they create an adversarial loop. These controls drive black-market actors to hire individuals to complete in-person verification steps, effectively harvesting real faces for databases that are subsequently resold for deepfake creation, fraudulent banking, or blackmail. This cycle mirrors earlier patterns observed in the Worldcoin black market, where iris scans were similarly traded for minimal cash payments.

The visibility of this supply chain increased significantly following the shutdown of Fable 5 and Mythos 5 on June 12, 2026. Anthropic terminated access to these models globally after a US government export control directive was issued at 5:21pm, citing an inability to differentiate between domestic and international users in real-time. As of June 27, 2026, Mythos was restored exclusively for critical infrastructure organizations authorized by the US government, while general developers remain locked out. These geopolitical restrictions have created a lucrative market for API proxies, particularly on platforms like GitHub and Telegram, where developers gain access to models at 10% of official costs.

According to research documented in May 2026 by Oxford researcher Zilan Qian, this transfer station economy relies on three mechanisms: bulk-registered account arbitrage, model swapping where users receive inferior models instead of those paid for, and data logging. These proxy operators often capture every prompt, response, and reasoning trace, monetizing user data and engineering logs to offset the costs of maintaining verified accounts. The human toll of these systems is disproportionately borne by individuals in regions with weaker legal protections. While policymakers in Brussels and San Francisco debate the merits of export controls and AI access, the external costs—including the permanent harvesting of biometric identities—are passed down to the Global South, creating an inescapable cycle of exploitation where the original identity subjects bear the long-term legal and reputational consequences of transactions they never authorized.