Four hours. That's all it took for the first open-source removal tool to go live after Anthropic confirmed that Claude models would globally embed invisible, machine-readable watermarks into AI-generated text to comply with the EU AI Act. The opening move of the watermark arms race arrived faster than almost anyone expected.

One Open-Source Project, Four Hours Later

According to WIRED, developer Guillaume Meyer's watermark-removal code has gone viral on GitHub, bookmarked more than 20,000 times on X, drawing more than 100 contributors — with many more folding the technique into their own projects.

The motivations are telling. Meyer told WIRED that some people evade the watermark because they simply disagree that all AI-generated content should be labeled; he says he's in it for the technical challenge. The more consequential signal: freelance content writers and social media creators have already contacted Meyer asking for help — people whose livelihoods depend on content, and for whom an AI label directly affects their business.

How the Watermark Gets Washed Out

Anthropic's watermarking builds on Google's SynthID, which Google has used for its own AI-generated content since 2023: it leaves a statistical pattern in Claude's word choices — imperceptible to humans, detectable by a machine that knows what to look for. Computer scientist Scott Aaronson proposed a similar method while at OpenAI, but says the company never deployed it because it worried watermarks would put customers off.

Meyer's removal approach is straightforward: use a non-watermarking LLM to generate multiple rewrites of Claude's text — swapping synonyms and lightly restructuring — which scatters the word-choice distribution the watermark depends on. Others went lighter:

  • Software engineer Erik Hughes spent 15 minutes building a tool (with Claude, no less) that strips invisible and look-alike characters, reorders sentences within paragraphs, and swaps words for synonyms;
  • Leon Chlon, a Visiting Fellow at the University of Oxford, condenses Claude's response, translates it into Arabic — whose semantics differ sharply from English — and translates it back;
  • Anthropic itself has acknowledged that heavily edited, paraphrased, or translated content might no longer carry the watermark.

The Regulatory Blind Spot

The EU AI Act's new rules took effect earlier this month: model providers must label synthetic content in machine-detectable ways, or face fines of up to 3 percent of annual turnover. The rules bar providers from marketing circumvention tools — but place no legal restriction on independent ones. Meyer's project sits squarely in that gap.

And the ammunition is shrinking: per WIRED, 190 organizations — including OpenAI, Microsoft, and Meta — have signed the EU's transparency code of practice. New models must carry watermarks from August, and existing models must integrate them by December. In other words, the premise of "find a non-watermarking LLM to rewrite with" may not hold within six months — unless you run a local model.

Anthropic's response to WIRED was measured: the watermark "doesn't change the meaning, quality, or readability of Claude's responses," and the company plans to ship a text-detection API so developers can verify things themselves. But the detector hasn't shipped yet — so nobody can rigorously prove whether any of these removal methods are truly foolproof.

What the Watermark War Is Actually About

Meyer's concern isn't trolling: the watermark only produces a probability that text was touched by Claude. It cannot distinguish "written by AI" from "AI fixed two typos." For someone who routinely polishes writing with Claude and Grammarly, a probabilistic flag could mean employers rejecting candidates or researchers accused of misconduct. The cost of false positives falls on individuals; the benefit accrues to the regulatory system. That asymmetry is the real source of the community backlash.

Wayne Pan, cofounder and CTO of Silicon Valley sovereign-AI startup Haimaker, integrated Meyer's open-source tool into his own platform. His verdict is blunt: "I think they wanted to show that they're in good faith doing it, but I don't think you can ever have a watermark that will withstand everything."

So the real question isn't whether watermarks can be bypassed — that answer arrived in four hours. It's who gets to make decisions based on probabilistic evidence. Full details in WIRED's report: https://www.wired.com/story/coders-say-they-already-found-workarounds-to-claudes-invisible-watermarks/