Researcher identifies hidden tracking in Claude Code
Starting with version 2.1.91, released April 2, 2026, Claude Code checks if a user is behind a proxy. If detected, it embeds indicators of a Chinese location into the system prompt, such as time zones matching Asia/Shanghai or Asia/Urumqi, Chinese proxy domains, or connections to Chinese AI labs.
The method uses steganography. Depending on the check, the model alters the date format from 2026-06-30 to 2026/06/30 and swaps the apostrophe in the string Today's date with different Unicode variants. These changes are invisible to the user but detectable by Anthropic.
Part of the code is hidden using XOR obfuscation with a key of 91. The 2.1.91 release notes do not mention this check. The researcher links this to efforts to identify Claude reselling in China and model distillation by Chinese labs, marking a new phase in Anthropic's enforcement of geoblocking.
Related stories
- Claude Code keeps your session data locally for 30 days
- Former Anthropic engineer says the company loosened safeguards for enterprise deals
- Vanta releases GrantGuard for auditing Claude Code permissions
- Anthropic removes covert tracking from Claude Code
- Users in China continue to bypass Claude access restrictions
- One git call let a repo escape the Claude Code sandbox
Comments
No comments yet. Be the first.
Join the conversation
Sign in with Google to leave a comment. Your name and avatar come from your Google profile, and the comment appears after moderation.