Export controls

Taiwan indicted nine people over American chips bound for China. The charge is forgery, and that is the whole design.

The export ban is Washington's; the courtroom is in Keelung. What binds an Nvidia manager now facing up to five years isn't US law — it's the end-user document he is accused of faking.

Stacked shipping containers at a Taiwanese international container terminal, the kind of transshipment hub through which the diverted AI servers moved.

Image: Eric850130 / Wikimedia Commons (CC BY-SA 4.0)

The reported version of this week's news is a crackdown: Taiwan, the story goes, has cracked down on the smuggling of advanced American chips to China. The binding version, the one in the indictment, is quieter and more revealing. On Monday the Keelung District Prosecutors' Office charged nine people over the diversion of high-end AI servers to the mainland. Eight of them are accused of breach of trust and document forgery. Not of violating an export control — of forging a document. That distinction is not a technicality. It is the entire mechanism by which a rule written in Washington becomes a criminal matter in a Taiwanese court, and it is worth reading slowly.

The chips are American. The controls that bar them from China are American. But no American official is in this case. The prosecutor is Taiwanese, the statute is Taiwanese, and the defendants include a manager at Nvidia's own Taiwan unit and two employees of Super Micro's Taiwan unit — people who worked for the companies that make and build the hardware, now accused of moving it where it was not allowed to go. To understand how that happened, you have to stop looking at the ban and start looking at the paperwork the ban runs on.

What the indictment actually charges

Prosecutors say the scheme involved 130 servers built around Nvidia's B300 — the Blackwell Ultra generation, which is barred from sale into China. The servers were ordered from Super Micro on paper that said they would be installed and used at a rented server facility inside Taiwan. They were not. Of the 130, prosecutors say 74 were ultimately delivered to Chinese customers: roughly fifty routed through Indonesia, sixteen sent directly, eight moved through Japan and then Hong Kong. A further 56, declared for Japan, were intercepted by Taiwanese customs and remain in Taiwan. To grease the movement, the group is said to have stood up a company in Japan and built fake websites — the digital furniture of a legitimate end-user that did not exist.

The charges follow the shape of that conduct exactly. A manager at Nvidia's Taiwan unit, identified by prosecutors by the surname Chang and described as the key figure who authorized the releases, faces the most serious exposure; prosecutors are seeking sentences of up to five years for the core defendants, whom they describe as driven by the pursuit of exorbitant profit. Read the charge sheet and note what is absent from it: there is no count of "breaching US export controls," because a Taiwanese court does not enforce American regulations directly. What it can enforce is a lie told on a Taiwanese document and a duty betrayed to a Taiwanese-registered employer. So that is what the indictment is built from — forgery, and breach of trust.

The rule that was actually broken

To see why forgery is the load-bearing offense, read the control itself rather than the summary of it. Washington began restricting the sale of Nvidia's most advanced chips to China in 2022 and tightened the regime through 2025, until the current top-tier parts — the Blackwell Ultra line the B300 belongs to — could not lawfully be sold or exported to China without a licence almost never granted. But an export control of this kind does not work by physically sealing a border. It works by attaching a legal obligation to a declaration. Among the operative requirements: orders above a threshold — reported here as more than eight units — trigger heightened scrutiny, including on-site verification that the customer named on the paperwork is the customer actually receiving the machines.

Once you know that clause exists, the whole scheme reads as a purpose-built assault on it. A rented server hall in Taiwan, documents stating the machines would live there, a shell company in Japan, fabricated websites for a fictitious buyer — none of that is needed to physically move a crate. All of it is needed to defeat one requirement: that you tell the truth, verifiably, about where the hardware ends up. The control does not, in the strict sense, forbid you from shipping a box. It binds you to a truthful statement about the box's destination and end use. Which means that evading it is not, first of all, an act of smuggling. It is an act of forgery. The indictment simply names the crime at the layer where the rule actually bites.

An export control is not, in the end, a wall. It is a sentence you sign about where a machine will live. Break the wall and you have smuggled; break the sentence and you have forged — which is why this is, above all, a forgery case. — Lena Haas

In force since 2022, enforced this week

It is always worth separating a rule that is in force from a rule that is enforced, because they are different facts and they arrive on different days. The ban on these chips has been in force for years; the black-and-grey market that routes them into China through third countries has been reported for almost as long. What is new here is not the prohibition. It is the enforcement, and specifically its venue. An allied government has used its own criminal law to prosecute the local employees of American companies for defeating an American rule — and it has done so without any need for the United States to extend its own courts across the Pacific. The reach of the export-control regime, in this case, required no American in the room at all.

That is the part worth dwelling on, because it is a familiar pattern wearing unfamiliar clothes. Europe has spent a decade demonstrating that whoever writes the binding rule sets the default for everyone who wants access, regardless of where they are — the so-called Brussels Effect. What Keelung shows is the same logic running through export control instead of data protection: Washington writes the rule, and allied states supply the courtrooms, because no chipmaker maintains a separate compliance regime for each jurisdiction and no ally that depends on American technology can afford to be seen as the leak in the system. Call it the long arm without the hand. The rule is American; the enforcement is local; the effect is global.

What it binds, and what it cannot reach

Read the numbers, though, and the same document that shows the regime's reach shows its limit. Of 130 servers, 74 got through — more than half — and were stopped, if at all, only after the fact and an ocean away. The 56 that were caught were caught at a Taiwanese customs desk, on the strength of a declaration that did not survive inspection. The 74 that were lost were lost to a lie the paper could not catch in time, dispersed through Indonesia, Japan and Hong Kong before anyone verified the fiction. A control whose enforcement mechanism is a truthful declaration is only ever as strong as the verification behind the declaration, and verification is slow, under-resourced, and one step behind a determined forger with a shell company. The rule binds the honest statement. It does not, on its own, follow the machine through three ports.

This is the gap that will define the next phase of the policy: not whether to ban the chips, which is settled, but how much verification the exporting system is willing to pay for. On-site checks, audited end-users, tracked serial numbers, penalties heavy enough to reprice the risk — these are the unglamorous machinery that decides whether a control is a fact or a formality. The indictment is evidence that the machinery is beginning to turn. The 74 are evidence of how far it still has to go.

Who it binds

One last feature of the text deserves attention, because it changes the incentive at the desk. This case does not fall only on two corporations. It falls on individuals — a manager who, prosecutors allege, personally signed off on the releases, and who personally faces years in prison if convicted. That is a different order of deterrent from a corporate fine. A fine lands on a balance sheet and is priced, in advance, as a cost of doing business; the compliance memo is filed and the trade continues. A criminal charge lands on the person who authorized the shipment. Nvidia has said it is cooperating with the authorities, and Super Micro has indicated the matter surfaced in part through its own compliance efforts — the corporate half of the response. But the half that will be felt is the personal one. The employee weighing whether to approve an order that smells wrong now has to weigh it against five years, not against a number the company can absorb.

So the reported story and the binding story part ways, as they usually do. The reported story is a crackdown on smuggling. The binding story is narrower and more durable: an American export rule, enforced by a Taiwanese court, against a forged document, aimed at the individual who signed it — with more than half the shipment already gone. That is how a control written in Washington becomes a fact of daily working life in a server hall near Keelung, whether or not anyone who works there ever had a say in it. The wall was never the point. The signature was.

References

  1. The Washington Post — Taiwan charges 9 over illegal AI server exports to China, including Nvidia and Super Micro staff
  2. PBS NewsHour — Taiwan charges 9 over illegal AI server exports to China, including Nvidia and Super Micro staffers
  3. Taipei Times — Nine indicted over AI server exports
  4. Bloomberg — Taiwan Indicts Nvidia Manager Over Alleged AI Chip Smuggling to China
  5. Al Jazeera — Nvidia, Supermicro employees charged over export of AI servers to China
The Friday Brief

One email. Every Friday.

The week's machines, money, and people — in under five minutes.