Taiwan indicts nine in alleged Nvidia AI server smuggling scheme

Introduction

A probe into the diversion of advanced AI servers to China has expanded in Taiwan. Prosecutors in Keelung have indicted nine people on allegations including breach of trust and document forgery. The suspects reportedly include a senior Nvidia manager and two Supermicro employees based in Taiwan, although authorities have not released their names.

The significance of the case goes beyond one shipment. It illustrates how export controls can be weakened in the middle of a supply chain, where distributors, installation records, customs declarations, and purported end users may be manipulated before hardware reaches its final destination.

Key points

• Taiwanese investigators say conspirators tried to create the appearance that 130 B300 servers had been installed and were operating at a Taiwan facility.
• Reuters reported that 74 of those servers were ultimately exported and delivered to Chinese customers. The remaining 56 were allegedly intended for China but were stopped after Taiwanese customs identified irregularities.
• The United States has required licenses for relevant semiconductor exports to China since 2022. Taiwan opened its own investigation after the US arrested Supermicro co-founder Wally Liaw in March over allegations involving roughly $2.5 billion in restricted AI servers since 2024.
• Supermicro says it is cooperating with Taiwanese authorities and has made internal changes, including dismissing employees linked by an internal investigation to the alleged scheme. A third-party review reportedly cleared current senior executives of involvement.
• Taiwanese prosecutors say the indicted employees knew that Nvidia and Supermicro maintained rigorous export-control procedures, but still cooperated at different levels for financial gain.

Why corporate compliance is central

Nvidia CEO Jensen Huang had previously criticized Supermicro’s compliance performance and urged the company to correct the problem. The reported involvement of an Nvidia manager now broadens the issue from vendor oversight to employee access, distributor screening, end-user verification, and internal reporting.

The case also points to an unnamed Southeast Asian company described by analysts as central to the alleged operation. Companies outside mainland China but connected to Chinese commercial networks can provide a layer of distance between restricted hardware and its ultimate customer. If that pattern is confirmed, regulators will be confronting not merely isolated misconduct but a network involving distributors, installation claims, and cross-border transfers.

Wider implications

US lawmakers are considering the Remote Access Security Act, which could extend export-control authority to remote, cloud-based access to critical hardware and software. The proposal addresses a different loophole: Chinese companies may not physically acquire restricted chips but could use them through data centers in Southeast Asia. New requirements would likely increase cloud providers’ obligations around customer identification and usage monitoring.

Yet broader rules alone may not close the gap. Physical servers can already be concealed through false installation records, layered distribution channels, and questionable end users. Remote access makes attribution even harder. Nvidia, Supermicro, and their partners may therefore face pressure to improve end-user checks, serial-number tracking, order audits, and conflict-of-interest reviews for employees and distributors.

The Taiwanese case remains at the indictment stage, and the allegations have not been finally adjudicated. Regardless of the outcome, it may accelerate a shift from controlling individual products to supervising the entire AI-compute chain: hardware logistics, cloud access, and corporate accountability.

Source: Ars Technica AI