231: A Paywall Stopped ChatGPT From Reading The Article. It Confidently Summarised It For Me Anyway.

Slobodan "Sani" Manic
Website Optimisation Consultant, No Hacks Founder & Keynote Speaker
CXL-certified conversion specialist and WordPress Core Contributor helping companies optimise websites for both humans and AI agents.
I got a 402 Payment Required error from a magazine. That's a status code that's been in the web standards since 1992, and almost nothing ever used it until now. TollBit sells this paywall to publishers, promising to charge AI crawlers for access. So I tested what the wall actually checks.
It reads one line of your request: the user agent name you type in yourself. Say you're Claude or GPT and you get a bill. Make something up and you walk straight in. I invented a crawler name that belongs to no company on earth and got the whole page one second later. The paywall checks a name, not a robot.
Then I asked Claude and ChatGPT to read the paywalled article anyway. Both got charged. Both answered. Neither had read a word of it. Claude said so upfront and told me it would search for other coverage instead. ChatGPT handed me a confident summary with no mention of a paywall, and its source tags credited Google and Metacast, not one of them Variety. It admitted the workaround only when I asked. That's the real problem: blocking the machine doesn't block the answer. It only decides who gets credited when the machine repeats you.
KEY TAKEAWAYS
- Request a page from your own website using a crawler name in the user agent, then try an invented name, and compare what each receives
- Read your robots.txt file beside what your server actually returns to different crawlers, line by line, because the two often disagree
- Check what Google-Extended actually covers before relying on it, because it has never covered AI Overviews
- Ask your AI assistant whether it read the page directly or searched around it, since both behaviors produce answers but only one involves actual access
- Blocking a crawler by name doesn't prevent the answer from appearing. It only determines who gets credited when the content circulates through other sources
SHOW NOTES
A Bill Instead of a Page
HTTP 402 Payment Required has existed since 1992. Almost nothing ever used it. Now TollBit sells it to publishers as a way to charge AI companies for accessing journalism. The promise sounds straightforward: crawlers pay, humans read free. But what does the wall actually check?
It reads the user agent string. That's the name a browser or crawler sends to identify itself. Compare that name against a list. If the name matches an AI crawler, send a bill. If the name says Chrome, or says nothing at all, let it through.
What the Wall Actually Checks
I made up a crawler name. It belonged to no company on earth. One second later, the full article loaded. The paywall doesn't detect robots. It detects honesty. Every crawler that identified itself accurately got charged. A fiction walked in free.
TollBit claims partnerships with thousands of websites, but the numbers vary: 6,000 on one page, 8,000 on another, 9,500 on a third. Only one paying customer has ever been named publicly: a news reader app. Zero AI companies appear on the page supposedly aimed at AI companies.
The robots.txt Contradiction
Variety's robots.txt names 25 crawlers. Twenty-four of them are blocked. But three crawlers that the file never mentions get charged anyway. The file says one thing. The server does another. Googlebot walks in free while Penske, Variety's parent company, sues Google in court.
Your robots.txt describes a policy. Your server enforces it. When the two disagree, the server wins. Publishers trusting robots.txt as a defense mechanism should test what their infrastructure actually returns.
Two Assistants, Zero Reading
I asked Claude and ChatGPT to summarize the paywalled article. Both got charged by TollBit. Both answered anyway. Neither had read the page.
They handled it differently, and the difference is the story. Claude said straight away that the page had blocked it, and told me it would search for coverage of the story instead. ChatGPT gave me a confident summary with no mention of a paywall at all. Its source tags credited Google and Metacast. Not one of them credited Variety. Only when I asked whether it had actually read the article did it say "Short answer, yes, but not in the way you might think," and explain that it had reconstructed the story from search results.
Blocking the machine doesn't block the answer. It decides who gets credited when the machine repeats what you wrote. A publisher locked behind a paywall still gets summarized. The summary just attributes the information to whoever else mentioned it.
Being Read or Being Cited
The question isn't whether AI can access your content. Someone, somewhere, has already quoted you, paraphrased you, or mentioned the same facts. The question is whether the AI knows your name when it repeats you.
Ask your chatbot where the facts came from. Press for the actual source. You'll often find a chain of attribution that never reaches the original. That's the real cost of blocking crawlers without ensuring your content circulates with proper credit attached.
QUESTIONS ANSWERED
What is HTTP 402 Payment Required?
HTTP 402 Payment Required is a status code that has existed in web standards since 1992 but was rarely used until recently. TollBit now deploys the 402 status code to charge AI crawlers for accessing publisher content, turning an obscure specification into a monetization mechanism for journalism websites.
How does TollBit's AI paywall work?
TollBit's paywall checks the user agent string in incoming requests and compares the name against a list of known AI crawlers. If the user agent matches a crawler like Claude or GPT, the system issues a 402 Payment Required response. However, this approach only catches crawlers that honestly identify themselves. Invented or spoofed user agent names bypass the check entirely.
Can ChatGPT and Claude read paywalled content?
They summarize it without reading it. Tested against a TollBit-protected page, both assistants were charged and both answered from coverage found elsewhere on the web. Claude said upfront it had been blocked and would search instead. ChatGPT gave no sign of a paywall and credited Google and Metacast rather than Variety.
What is the difference between robots.txt and server-side blocking?
The robots.txt file describes a policy by naming which crawlers should be blocked, but nothing forces a crawler to obey the file. Server-side blocking actually enforces access rules regardless of what robots.txt says. Variety's robots.txt names 25 crawlers with 24 blocked, yet three crawlers not mentioned in the file get charged anyway, showing the disconnect between description and enforcement.
Does blocking AI crawlers prevent AI from summarizing your content?
Blocking AI crawlers does not prevent AI assistants from summarizing your content. When the original source is inaccessible, AI systems find the same information through secondary sources like search results, directories, or websites that quoted the original. Blocking only determines who receives attribution when the AI repeats the information.
How can I test if my website properly blocks AI crawlers?
Request a page from your website using a known AI crawler name in the user agent header, then repeat the request with an invented crawler name, and compare the responses. Also read your robots.txt file line by line against what your server actually returns to different crawlers, since the two often disagree in practice.
RELATED ARTICLES
Eleven Ways Websites Can Get Paid For AI Use, And Who Sets The Price In Each
In 2025 Cloudflare let websites set the price AI crawlers pay. In 2026 it launched a scheme where the AI company sets the price and reports its own usage. Across eleven schemes that pay websites for AI use, the ones where the website names the price have no AI company named as paying, and where AI companies pay, they set the price or count the usage.
Amazon Blocked Meta's Muse, And robots.txt Had Nothing To Say
Amazon cut Meta's Muse off from its store on 20 September with a Conditions of Use notice. Its own robots.txt blanket-refuses 99 named agents, and Muse is not one of them, because Meta's crawler documentation lists no user agent string for it.
The Text-Only Version Of Your Website Strips Out The Wrong Layer
Strip a website down for machines and you should get something a machine can use. The text-only versions being served to AI are the page with the buttons removed, and GEO, the discipline for getting cited in AI answers, has organised itself around the half that cannot act.
ENJOYING THIS EPISODE?
Practical strategies for making your website work for AI agents and the humans using AI to find you. Once a week you get the new articles, the latest podcast episode, and a few links worth keeping.
