Chinese art toy giant Pop Mart is using Tencent Cloud’s security tech to stop scalpers from snapping up its products.

The company’s popular Labubu collectible figures have sparked a frenzy, with new releases selling out instantly online and drawing massive queues at physical stores worldwide.

This high demand has attracted organized scalpers who use specialized software and bots to buy the toys, leaving genuine fans empty-handed. The attacks are particularly prevalent on the company’s WeChat mini program.

To fight back, Pop Mart has implemented Tencent Cloud’s security solution, which creates a multi-layered defense system.

The system works by identifying non-human behavior at the client level, using device fingerprinting to detect emulators and malicious scripts. It also uses an AI-powered engine to filter malicious traffic and manage sudden sales surges.

Since adopting the solution, Pop Mart says suspected scalper activity has plummeted to 0.2%. This has significantly increased the success rate for real fans looking to buy the collectibles.

The move is part of a deeper collaboration between the two firms. In April, Pop Mart migrated its core consumer business to Tencent Cloud, boosting its system capacity to handle 400,000 queries per second.

🔗 Source: Xinhua

🧠 Food for thought

1️⃣ The rising economic stakes in the bot vs. brand battle

The scope of bot attacks on limited-edition products has escalated dramatically, forcing brands to invest heavily in sophisticated countermeasures.

A single Japanese gaming company blocked 225,000 bots during just one product launch, while a U.S. ticketing company faced 3.2 million bot attempts during a major sales event 1.

For high-demand collectibles like POP MART’s figurines, the economic implications extend beyond lost sales. Scalpers create artificial scarcity by hoarding inventory, then reselling at inflated prices that damage brand reputation and consumer trust.

This growing problem has prompted regulatory attention, with the White House issuing an Executive Order targeting ticket scalping and enforcing the BOTS Act 2.

The technical arms race between scalpers and retailers continues to intensify, with bot operators now using sophisticated tools including emulators, virtual machines, and IP spoofing to bypass traditional defenses.

2️⃣ Consumer trust has become a critical business metric in e-commerce

Recent POP MART developments