Paid AI Accounts Are Now a Hot Underground Commodity

Flare analysts identify a growing underground market that buys and resells access to premium AI services (e.g., ChatGPT, Claude, Microsoft Copilot) using stolen or mass-created accounts, exposed API keys, and verification-bypass techniques; these accounts are advertised as cheaper, bundled, or with fewer restrictions and are being used to scale phishing, social engineering, fraud, automation, and synthetic impersonation. The report recommends enforcing MFA, securing and rotating API keys, monitoring login/usage anomalies, using enterprise controls, and monitoring underground markets to detect exposed accounts and keys.