The thread title is almost always the same: heading to China, how do I keep Claude from getting banned? It shows up on r/ClaudeCode, r/ClaudeAI, and again every time Anthropic tightens a region. In October 2026, Hong Kong users posted that accounts they had run through NordVPN for months were revoked after “suspicious signals.” Mainland travelers report the same pattern: it works for a week, then the safeguards email arrives.
This is not a guide to hiding from Anthropic. Claude is not offered in mainland China, and Anthropic’s own supported-countries list is the rule they enforce. A VPN cannot promise that a third-party account stays open. What a bad VPN *does* do is make you look like five different people in three countries before lunch. That is the part you can stop.
What the Reddit posts actually describe
Three failure modes keep repeating.
The IP hops. Free and cheap clients rotate exits when a node dies. Claude sees Tokyo at 09:12, Los Angeles at 09:14, then a German datacenter at 09:20. Payment is still a US card. That mismatch is a common ban story: one Reddit user kept a Japanese VPN exit and paid with a US card; the second account died shortly after the upgrade.
The leak. Browser traffic goes through the tunnel. Claude Code and the desktop app do not inherit macOS system proxy settings. GitHub issue #30318 walks through it: the terminal still talks from the real network, the API returns 403, and /status shows the wrong account type. People then toggle five clients trying to “fix” it, which makes the hop problem worse.
The shared exit. Consumer VPNs put thousands of people on one datacenter address. Some of those people already burned that IP with Claude. You inherit the reputation.
None of this is secret tradecraft. It is just a noisy connection.
What you can control
Use one exit and stay on it. If you pick Singapore, stay on Singapore for the session. Do not “try Japan real quick” because YouTube felt slow.
Turn IPv6 off on the machine if your VPN does not handle it. Several China setups still leak AAAA queries past the tunnel.
Put Claude Code and the desktop app on the same path as the browser. If the app ignores the system proxy, you need a VPN that owns the whole device route, not a browser-only extension.
Back up anything you cannot afford to lose. Browser export, local copies of CLAUDE.md, repos that are not only inside a chat. People who got banned in Hong Kong first asked how to retrieve history. Do that before you travel.
Read Anthropic’s terms for the region you are in. If the product is not sold there, a tunnel does not create a right to keep the account.
Why the connection itself matters
Claude Code is chatty. Long sessions, file reads, retries when a request flakes. A 200 GB monthly cap on a “China VPN” runs out in a bad week. Then you switch apps, switch nodes, and you are back to looking like a different person.
Qiao’s paid plans do not have a traffic cap. Voyager and Meridian are unlimited. We do not charge overage. BitTorrent is blocked; ordinary work and model traffic is not.
Meridian adds Smart Flow, so WeChat, Alipay, maps, and banking stay on the local path while Claude goes through the tunnel. That stops the other classic failure: you turn the VPN on for Claude and suddenly you cannot pay for dinner.
Meridian also offers a dedicated IP. One address, yours, instead of a pool that already has a Claude ban history.
The website chat and ticket desk are on the same account. If a node is having a bad hour, you say so from the signed-in widget; it becomes a ticket an operator can answer.
Try it before you fly
Install the app before you land. The China App Store will not hand you a foreign VPN, and Google Play is not there. Sign in at home, take the complimentary first day of Meridian (no card), and confirm Claude Code, the browser, and your local apps behave.
If you buy after that, every plan includes unlimited traffic and a 7-day money-back window on the first paid purchase. After day 7 the sale is final.
We do not log browsing, DNS, or traffic contents. Servers are RAM-only. That does not make Anthropic more lenient. It means we are not sitting on a file of your prompts.