Detailed Analysis
A Reddit post in r/Anthropic titled "someone is using my Claude account" surfaces a recurring complaint from a user who reports that their Claude usage quota is being consumed without their involvement, despite having Google-based login with two-factor authentication already enabled. The poster notes this is not an isolated incident—they claim to have previously filed a report about the same issue—suggesting either an unresolved account compromise, a billing/usage-tracking bug on Anthropic's side, or some other explanation such as shared API keys, browser extensions, or third-party integrations silently consuming tokens. The post includes a screenshot (referenced but not independently verifiable here) presumably showing unexpected usage spikes or session activity the user did not initiate.
This type of complaint matters because it touches on a growing tension in the consumer AI space between convenience and account security. As Claude, ChatGPT, and similar assistants become embedded in daily workflows—often tied to single sign-on (SSO) through Google or other identity providers—users increasingly assume that 2FA on the underlying account (Google, in this case) is sufficient protection. But AI platforms frequently issue their own session tokens, API keys, or persistent OAuth grants that can remain valid independently of the parent account's security posture. If a user's Claude session or API key was compromised prior to enabling 2FA, or if a browser extension, connected app, or leaked credential retains access, 2FA on Google alone would not stop unauthorized usage. This is a known gap in SSO-based security models: the strength of the "front door" doesn't necessarily protect against back-door access via long-lived tokens.
The fact that this is a repeated report is notable in itself. Anthropic, like other AI labs, has faced scaling pressure as its user base grows rapidly, and support/moderation bandwidth for individual account-security incidents can lag behind the pace of new sign-ups and usage. Community forums like Reddit often become a venue for users to escalate issues when direct support channels feel slow or opaque—a pattern seen across nearly every major tech platform, from cloud API providers to consumer subscription services. For paid Claude users, unexplained usage draining a rate-limited quota or triggering unexpected billing is a tangible, high-stakes problem, distinct from more abstract concerns like model behavior or alignment.
More broadly, this incident is a small but illustrative data point in the maturation of AI-platform account infrastructure. As usage-based pricing, API access, and agentic tool integrations proliferate across Claude, ChatGPT, and Gemini, the attack surface for credential leakage, token theft, and session hijacking expands correspondingly. Users report similar "phantom usage" complaints across competing platforms, often traced to leaked API keys in public repositories, malicious browser extensions, or compromised third-party integrations rather than a break of the core authentication system itself. For Anthropic, incidents like this underscore the importance of clearer session/device management tools, more granular usage logs, and faster incident-response loops—features that are increasingly table stakes as AI assistants shift from novelty products to infrastructure that users trust with sensitive access and real money.
Read original article →