China’s Alibaba will ban employees from using Anthropic’s programming tool Claude Code, starting on July 10, according to multiple reports. The move comes despite the fact that Anthropic already prohibits Chinese companies, as well as foreign entities owned by those companies, from using its models. So it’s less a ban and more of a formal acknowledgment that the workaround was probably not supposed to be happening.

Anthropic has reportedly been working to close loopholes that allow Chinese users to access Claude. According to a recent Reddit post, some of that loophole-closing involved a version of Claude Code that could secretly identify Chinese users. Anthropic’s Thariq Shihipar said in a post on X that this was “an experiment we launched in March that was meant to prevent account abuse from unauthorized resellers and protect against distillation.” (Distillation is a practice where AI models are trained on the outputs of other models, which is a fancy way of saying they were trying to stop people from stealing their homework.)

“The team has landed stronger mitigations since then and we’ve actually been meaning to take this down for a while,” Shihipar said. Nonetheless, Alibaba has reportedly classified Claude Code as high-risk software and is instructing employees to use the company’s own Qoder tool instead. Because nothing says “high-risk” like a tool you were already not supposed to be using.