231: A Paywall Stopped ChatGPT From Reading The Article. It Confidently Summarised It For Me Anyway.

Slobodan "Sani" Manic
Website Optimisation Consultant, No Hacks Founder & Keynote Speaker
CXL-certified conversion specialist and WordPress Core Contributor helping companies optimise websites for both humans and AI agents.
I got a 402 Payment Required error from a magazine. That's a status code that's been in the web standards since 1992, and almost nothing ever used it until now. TollBit sells this paywall to publishers, promising to charge AI crawlers for access. So I tested what the wall actually checks.
It reads one line of your request: the user agent name you type in yourself. Say you're Claude or GPT and you get a bill. Make something up and you walk straight in. I invented a crawler name that belongs to no company on earth and got the whole page one second later. The paywall checks a name, not a robot.
Then I asked Claude and ChatGPT to read the paywalled article anyway. Both got charged. Both answered. Neither had read a word of it. Claude said so upfront and told me it would search for other coverage instead. ChatGPT handed me a confident summary with no mention of a paywall, and its source tags credited Google and Metacast, not one of them Variety. It admitted the workaround only when I asked. That's the real problem: blocking the machine doesn't block the answer. It only decides who gets credited when the machine repeats you.
KEY TAKEAWAYS
- Request a page from your own website using a crawler name in the user agent, then try an invented name, and compare what each receives
- Read your robots.txt file beside what your server actually returns to different crawlers, line by line, because the two often disagree
- Check what Google-Extended actually covers before relying on it, because it has never covered AI Overviews
- Ask your AI assistant whether it read the page directly or searched around it, since both behaviors produce answers but only one involves actual access
- Blocking a crawler by name doesn't prevent the answer from appearing. It only determines who gets credited when the content circulates through other sources
SHOW NOTES
A Bill Instead of a Page
HTTP 402 Payment Required has existed since 1992. Almost nothing ever used it. Now TollBit sells it to publishers as a way to charge AI companies for accessing journalism. The promise sounds straightforward: crawlers pay, humans read free. But what does the wall actually check?
It reads the user agent string. That's the name a browser or crawler sends to identify itself. Compare that name against a list. If the name matches an AI crawler, send a bill. If the name says Chrome, or says nothing at all, let it through.
What the Wall Actually Checks
I made up a crawler name. It belonged to no company on earth. One second later, the full article loaded. The paywall doesn't detect robots. It detects honesty. Every crawler that identified itself accurately got charged. A fiction walked in free.
TollBit claims partnerships with thousands of websites, but the numbers vary: 6,000 on one page, 8,000 on another, 9,500 on a third. Only one paying customer has ever been named publicly: a news reader app. Zero AI companies appear on the page supposedly aimed at AI companies.
The robots.txt Contradiction
Variety's robots.txt names 25 crawlers. Twenty-four of them are blocked. But three crawlers that the file never mentions get charged anyway. The file says one thing. The server does another. Googlebot walks in free while Penske, Variety's parent company, sues Google in court.
Your robots.txt describes a policy. Your server enforces it. When the two disagree, the server wins. Publishers trusting robots.txt as a defense mechanism should test what their infrastructure actually returns.
Two Assistants, Zero Reading
I asked Claude and ChatGPT to summarize the paywalled article. Both got charged by TollBit. Both answered anyway. Neither had read the page.
They handled it differently, and the difference is the story. Claude said straight away that the page had blocked it, and told me it would search for coverage of the story instead. ChatGPT gave me a confident summary with no mention of a paywall at all. Its source tags credited Google and Metacast. Not one of them credited Variety. Only when I asked whether it had actually read the article did it say "Short answer, yes, but not in the way you might think," and explain that it had reconstructed the story from search results.
Blocking the machine doesn't block the answer. It decides who gets credited when the machine repeats what you wrote. A publisher locked behind a paywall still gets summarized. The summary just attributes the information to whoever else mentioned it.
Being Read or Being Cited
The question isn't whether AI can access your content. Someone, somewhere, has already quoted you, paraphrased you, or mentioned the same facts. The question is whether the AI knows your name when it repeats you.
Ask your chatbot where the facts came from. Press for the actual source. You'll often find a chain of attribution that never reaches the original. That's the real cost of blocking crawlers without ensuring your content circulates with proper credit attached.
QUESTIONS ANSWERED
What is HTTP 402 Payment Required?
HTTP 402 Payment Required is a status code that has existed in web standards since 1992 but was rarely used until recently. TollBit now deploys the 402 status code to charge AI crawlers for accessing publisher content, turning an obscure specification into a monetization mechanism for journalism websites.
How does TollBit's AI paywall work?
TollBit's paywall checks the user agent string in incoming requests and compares the name against a list of known AI crawlers. If the user agent matches a crawler like Claude or GPT, the system issues a 402 Payment Required response. However, this approach only catches crawlers that honestly identify themselves. Invented or spoofed user agent names bypass the check entirely.
Can ChatGPT and Claude read paywalled content?
They summarize it without reading it. Tested against a TollBit-protected page, both assistants were charged and both answered from coverage found elsewhere on the web. Claude said upfront it had been blocked and would search instead. ChatGPT gave no sign of a paywall and credited Google and Metacast rather than Variety.
What is the difference between robots.txt and server-side blocking?
The robots.txt file describes a policy by naming which crawlers should be blocked, but nothing forces a crawler to obey the file. Server-side blocking actually enforces access rules regardless of what robots.txt says. Variety's robots.txt names 25 crawlers with 24 blocked, yet three crawlers not mentioned in the file get charged anyway, showing the disconnect between description and enforcement.
Does blocking AI crawlers prevent AI from summarizing your content?
Blocking AI crawlers does not prevent AI assistants from summarizing your content. When the original source is inaccessible, AI systems find the same information through secondary sources like search results, directories, or websites that quoted the original. Blocking only determines who receives attribution when the AI repeats the information.
How can I test if my website properly blocks AI crawlers?
Request a page from your website using a known AI crawler name in the user agent header, then repeat the request with an invented crawler name, and compare the responses. Also read your robots.txt file line by line against what your server actually returns to different crawlers, since the two often disagree in practice.
RELATED ARTICLES
The Text-Only Version Of Your Website Strips Out The Wrong Layer
Strip a website down for machines and you should get something a machine can use. The text-only versions being served to AI are the page with the buttons removed, and GEO, the discipline for getting cited in AI answers, has organised itself around the half that cannot act.
Apple On The Agentic Web: Every Way It Uses Your Website
Siri AI runs on Google's Gemini, and for a website the interesting part is not the model. Apple now reaches your pages five ways, three of them new this month, two with no user agent and nothing you can set. Every agent, every control, and what each control actually covers.
Cloudflare Will Write Your robots.txt, And It Has A Point
Bot Preference Sync turns your Cloudflare bot settings into robots.txt entries, and Cloudflare says it will reach every plan and arrive on by default for new customers. The product is good. Policy is set per category, and Cloudflare's tracked bot list decides which crawlers belong to each one, so the per-company judgment many websites make cannot be expressed in it. The Training switch also decides which crawlers get blocked for failing four disclosure conditions Cloudflare has published.
ENJOYING THIS EPISODE?
Practical strategies for making your website work for AI agents and the humans using AI to find you. Once a week you get the new articles, the latest podcast episode, and a few links worth keeping.
