An internal investigation of suspicious signals associated with your account indicates a violation of our Usage Policy. As a result, we have revoked your access to Claude.
Claude Nonstop runs the official claude binary — it doesn't extract tokens, modify requests, or do anything detectable as different from normal CLI usage. It's the same as manually running claude with a different CLAUDE_CONFIG_DIR, which is how Claude Code's own profile system works.
That ban message is the same one Anthropic sends for a range of violations (third-party OAuth tools, VPN/proxy usage, chargebacks, account sharing). If you were using any other tools that access Claude outside the official CLI, that's the more likely cause.