Don't have a solution but just to add that I'm the same boat, and I've seen a few others. Something trips their anomaly detection and they don't care about it because it's presumably a low false positive rate.

For what it's worth I can just pay for tokens through other providers proxying their API. Still sucks because you end up paying much more.