This checklist starts with what Anthropic states officially, then lists the practices most often cited in community reports and public reverse-engineering. Items outside the official section are observations, not documented rules, and none of them make an ineligible account eligible. Each section links to a deeper guide.
Official Rules First
- Ban reasons: Anthropic's Help Center lists repeated Usage Policy violations, account creation from an unsupported location, and Terms of Service violations.
- Supported regions: Mainland China, Hong Kong, and Macau are not on the Supported Regions list; Taiwan, Singapore, Japan, and India are. Hong Kong users reported suspensions from Oct 1, 2026, including users who connected through VPN exits in supported regions, and Anthropic has not commented (see News).
- Payment: Pro and Max on the web accept credit or debit cards only, and the billing address must match the card's country of origin. See payment methods and decline troubleshooting.
- Appeals: Sign in to claude.ai with the banned account to reach the appeal form. API warnings go to usersafety@anthropic.com.
- Scale: Anthropic's transparency report shows about 10.5% of appeals in the first half of 2026 ended in reinstatement.
1. Account & Payment Safety
- One account, one identity stack: Do not reuse the same card, phone number, or billing address across multiple Pro accounts. Community reports link batch disables to shared payment instruments, phone numbers, and IP addresses.
- Corporate ownership matters: Since Sept 2025, entities more than 50% owned by companies headquartered in unsupported regions (e.g. China) are barred — even if incorporated in Singapore or the US.
- Align geography: The card country and billing address must match (an official requirement). Community reports also name a US card combined with a Singapore IP and a China timezone as a common mismatch in ban cases.
- Avoid VoIP numbers: Use physical SIM or reputable SMS services; many VoIP prefixes fail verification or trigger instant review.
- Use the refund request first: Anthropic has not published how bank disputes affect an account. For a failed or unwanted charge, use Get help > Claude Refund Request before contacting your bank.
→ Full guide: Safe Account Registration & Payment
2. Environment & Browser Hygiene
- Fix timezone first: Public reverse-engineering reports say Claude Code reads the system timezone. Move off Asia/Shanghai and confirm
getTimezoneOffset()is not UTC+8. - Language & fonts: Remove zh-CN from the top of
navigator.languages; isolate Chinese vendor fonts (MiSans, HarmonyOS Sans) in a clean browser profile. - Stop WebRTC leaks: Disable or restrict WebRTC so your real IP does not bypass the proxy.
- Use a clean, stable IP: Shared datacenter and commercial VPN ranges appear more often in ban reports than residential or mobile IPs. Prefer a clean residential or mobile IP in a supported region.
→ Full guide: Environment Cleanup & IP Setup · Browser Configuration
3. API & Claude Code Usage
- Match CLI and browser: Export the same
TZ, proxy, andANTHROPIC_BASE_URLin every shell where Claude Code runs. Split-brain configs (browser on VPN, CLI direct) are a top cause of 403 errors. - Respect rate limits: The API docs list Start, Build, and Scale tiers; Start allows 1,000 RPM per model, and new organizations may begin on a lower Evaluation tier. Quota headroom does not rule out review of high-repetition or coordinated traffic. Use exponential backoff, the Batch API, or prompt caching for bulk work.
- Choose relays carefully: Gateways that strip
cache_controlmarkers oranthropic-betaheaders, or inject text, break prompt cache and can look like abuse. - No credential sharing: Never paste API keys into public repos, chat logs, or shared CI logs. Rotate keys if exposed.
→ Full guide: Claude Code & API Safety · Automation Safety
4. Usage Patterns & Frequency
- Warm up new accounts: Avoid hundreds of API calls or marathon Claude Code sessions on day one. Gradual usage looks more natural than instant max-tier load.
- Avoid distillation-like patterns: Anthropic's Feb 2026 distillation report describes flagging narrow, high-volume capability targeting, such as thousands of near-identical coding prompts. Accounts created after Aug 31, 2026 face stricter thinking-block replay binding, so never cache and replay raw thinking blocks. Spread workloads across time and vary prompt structure.
- Separate workloads: Do not run aggressive scraping, mass account creation, or policy-edge prompts on your primary paid account.
- One device fingerprint per account: Switching between a China-locale laptop and a US VPS on the same login within hours raises association risk.
- Log and audit: Keep request volume and error rates visible so 429 spikes are caught before they escalate to review.
→ Full guide: Multi-Account Management · Ban Case Studies
5. When Something Goes Wrong
- Diagnose the ban type: 403 at login (IP/geo), forced refund email (payment mismatch), or full disable (policy) — each needs a different response.
- Appeal via official channels: Disabled accounts → claude.ai/restricted; API warnings → usersafety@anthropic.com. Anthropic publishes no response time, so describe the legitimate use case in English with verifiable context.
- Do not panic-create accounts: Community reports range from reinstatement within days to no reply for weeks, and Anthropic publishes no response time. Replacement accounts created while an appeal is pending raise association risk, according to community reports.
- Fail over gracefully: Keep a domestic model or local Ollama/One-API route ready so production does not halt during recovery.
→ Full guide: Account Appeal & Recovery SOP · Domestic Alternatives
Quick Self-Check
Run the Claude 环境检测 detector on the same browser profile you use for Claude. Score above 60? Fix timezone and language before touching payment or API settings. Score below 30 but still banned? The scan cannot see your account region, IP reputation, payment method, or usage pattern, so check those next. An account created from an unsupported location can be disabled regardless of the browser score.