Illegal AI Server Exports to China from Taiwan: Uncovering Risks of Semiconductor Export Control Circumvention

Executive Summary

The recent indictment of nine individuals in Taiwan, including personnel from Nvidia's and Supermicro's local branches, for breach of trust and document forgery has exposed structural loopholes in the whitelist system and oversight gaps in multi-tiered distribution networks. Nvidia's price hikes are a structural factor that increases the incentive for arbitrage in controlled items, making the recurrence of similar incidents likely. The most probable path forward is for the United States to gradually strengthen its oversight of whitelist management and end-user verification procedures, rather than sanctioning individual companies. For South Korean semiconductor firms, this means that even without being directly sanctioned, they must accept rising compliance costs and delays in contracting procedures as a new constant. SK Hynix and Samsung Electronics will need to simultaneously pursue active verification systems to track the entire resale chain and the geographic diversification of their Taiwan-dependent supply chains.

I. Issue Analysis

Illegal AI Server Exports to China from Taiwan: An Issue Analysis

1. Background and Developments

On August 24, 2024, the Keelung District Prosecutors Office indicted nine individuals, including employees of Nvidia's Taiwan branch and a Supermicro subsidiary in Taiwan, on charges of breach of trust and document forgery [1][5]. The core of the case involves the illegal sale of 74 B300 high-performance AI servers to a Chinese buyer [10][11]. The B300 is a product equipped with Nvidia's export-controlled GPUs, making it an item banned from sale to China [11].

According to a report by the *United Daily News* (*Lianhe Bao*), the incident originated from financial problems within the supply chain [10]. Feihu Technology was an Nvidia-approved whitelisted client. When the buyer the company had initially secured ran into funding issues, it became impossible to fulfill the contract [10]. Fearing the loss of its whitelist status, Feihu Technology arranged to sell the servers to a Chinese buyer through a Supermicro reseller, Ching Yun Co. [10]. Prosecutors found that Chang Teng-lung, a director at Nvidia's Taiwan branch, and Lin Chang-chun and Wang Hsiang-yi, assistant vice presidents at Supermicro's Taiwan subsidiary, were involved in this scheme [10].

Of the nine individuals indicted, eight face charges of breach of trust and document forgery, while one is accused of misappropriating funds from a related company [5]. The head of Feihu Technology has fled and is now a wanted fugitive [10]. Prosecutors have sought five-year sentences for Chang Teng-lung, Lin Chang-chun, Wang Hsiang-yi, and Wang Kai-ping, the head of Chang Ying Co., citing their poor attitude after the crime [10].

2. Current Situation

The indictment by Taiwanese authorities demonstrates that the U.S. export control regime for semiconductors is being continually tested through Taiwan, a key production and distribution hub [8]. The Associated Press (AP) described the case as "another ripple in the U.S.-China AI rivalry," noting that the advanced semiconductors produced in Taiwan have become a central issue in the competition between the two countries [8].

Nvidia has publicly stated its intention to cooperate with Taiwanese authorities. Nvidia spokesperson Patrick Lairat said the company would "cooperate with Taiwanese authorities to help them resolve the issues related to these allegations as quickly as possible" [11]. This can be interpreted as an attempt by Nvidia to preemptively contain compliance risks after a loophole in its own whitelist management system was exposed.

*The Wall Street Journal* (WSJ) assessed the investigation and indictment as an example of the Taiwanese government's will "to restrict the flow of technology to the mainland" [5]. As the United States' largest semiconductor foundry ally and home to TSMC, Taiwan is a key nation in the supply chain. If it fails to detect circumvention exports, its very relationship of trust with the U.S. could be undermined.

3. Key Actors and Interests

Taiwanese Prosecutors and GovernmentIn this case, Taiwan has taken on the role of an enforcer guaranteeing the credibility of the U.S. export control regime. The Keelung District Prosecutors Office indicted the individuals on charges of violating domestic laws—breach of trust and document forgery—thereby handling the export control violation within its own domestic criminal justice process [10]. This has the effect of signaling to the international community that Taiwan is blocking circumvention of U.S. controls through its own judicial system.

Nvidiais the party whose whitelist management system's flaws have been exposed. The fact that its own employees were involved in the circumvention scheme shows the limitations of Nvidia's customer vetting and monitoring system within a multi-tiered distribution structure [10][11]. The company has moved to manage its relationship with the U.S. Department of Commerce and Taiwanese authorities by publicly pledging cooperation with the investigation [11].

Supermicronow faces additional compliance responsibilities at the server assembly and distribution stage, as two employees of its Taiwan subsidiary were among those indicted [5][8]. Supermicro's role is to assemble Nvidia GPUs into servers, and this case has reaffirmed that the responsibility for end-customer verification is distributed, not resting solely with Nvidia but also with assemblers [10].

Chinese Buyershave continuously demonstrated demand for acquiring advanced AI servers through circumvention routes outside the whitelist system. This suggests that even as China pursues self-sufficiency in AI accelerators, substantial real demand for Nvidia and Supermicro products persists among users requiring state-of-the-art performance.

U.S. GovernmentWhile not a direct party to this case, the U.S. government has a vested interest as the architect of the export control regime. The effectiveness of its controls depends on the voluntary enforcement by allies like Taiwan, South Korea, and Japan, so this indictment could be used as an example of Taiwan's willingness to cooperate.

4. Key Issues

The first issue is the structural vulnerability of the whitelist system. The status of being an Nvidia-approved client company itself became the starting point for the circumvention. When a legitimate whitelisted client faced financial difficulties, the motive to maintain this status ironically led to illegal distribution [10].

The second issue is accountability in the multi-tiered distribution structure. In the distribution chain from Nvidia → Supermicro → reseller (Ching Yun Co.) → final seller (Feihu Technology), it is unclear to what extent each participant fulfilled their obligation to verify the final destination [10]. This suggests that a re-examination of the end-user verification system across the entire supply chain is inevitable.

The third issue is the gap between the practical effectiveness and symbolic nature of Taiwan's judicial response. While the criminal indictment in a case involving 74 servers demonstrates the Taiwanese authorities' will to enforce, the fact that such an incident occurred and took a significant amount of time to be detected also exposes the limits of a continuous monitoring system.

II. In-Depth Analysis

Illegal AI Server Exports to China from Taiwan: An In-Depth Analysis

1. Analysis of Root Causes

On the surface, the cause of this incident appears to be misconduct by individual company employees. A closer look at the structure, however, suggests the outcome was almost preordained. Feihu Technology faced a crisis in fulfilling its contract when the Chinese buyer it had originally secured lost its funding [10]. Fearing it would be removed from Nvidia's whitelist, the company sought an alternative buyer through a Supermicro reseller, Ching Yun Co. [10]. Employees from Nvidia's Taiwan branch and Supermicro's Taiwan subsidiary became involved in this process [10].

The root cause lies in the design of the whitelist system itself. Nvidia's whitelist is a method of vetting the credibility of end-buyers in advance. However, there are no mechanisms to control for a buyer's financial condition deteriorating after the fact. This creates a structure that incentivizes distributors, fearful of losing their whitelist status, to circumvent regulations. This was compounded by a multi-tiered distribution network—from Nvidia and Supermicro to a Taiwanese agent and a Chinese buyer—which diluted oversight responsibility at each stage [10].

Demand-side factors are also fundamental. Nvidia notified major clients of a price increase of over 15% for its Vera Rubin and Grace Blackwell series systems, citing soaring memory prices [14]. When prices rise amid limited supply, the profit margin from diverting controlled items to the gray market also increases. The smuggling of B300 servers is a product of the arbitrage created by this price structure [10][11].

2. Structural Context

Political Context: Taiwanese prosecutors indicted the individuals not for violating export control laws, but under domestic criminal statutes for breach of trust and document forgery [10][5]. This signifies a structure where Taiwan acts as a proxy enforcer of the U.S. export control regime using its domestic legal tools. For the Taiwanese government, maintaining a relationship of trust with the United States is directly linked to the access of its entire semiconductor industry, including TSMC, to the U.S. The swift indictment and the prosecutors' request for sentences of up to five years [10] can be seen as a result reflecting this political pressure.

Economic Context: Taiwan is a key hub for the server assembly process. Supermicro performs the role of assembling Nvidia GPUs into servers in Taiwan [10]. The case of Mexico's imports of Taiwanese computers increasing 19-fold in 2023 [12] shows that Taiwan functions as a central physical node in the AI server supply chain. The more concentrated the node, the greater the incentive for circumvention attempts to converge there. At the same time, the facts that China's semiconductor exports increased by 99.5% over the same period and Cambricon's sales grew by 108% [6] suggest a persistent large gap between domestic AI accelerator demand and self-sufficient production. This gap lies at the root of the demand for smuggled goods.

Security Context: The Stockholm International Peace Research Institute (SIPRI) notes that G7 attempts to maintain multilateral coordination on strategic goods export controls are faltering amid deepening geopolitical competition [7]. The same report confirms that China has used rare earth export controls as a countermeasure to U.S. controls [7]. The Taiwan case shows the other side of this dynamic: how easily the U.S. control regime can be breached through the private-sector distribution networks of its allies. The rise of "geotechnology logic," as pointed out by Professor Seok-joon Kwon at an EAI forum [2], means that semiconductor controls have now transformed from a simple trade regulation issue into a matter of managing security assets.

3. Historical Precedents and Comparison with Similar Cases

The Taiwan case is not a new type of violation. The 1987 incident in which Toshiba Machine sold precision machining technology for submarine propellers to the Soviet Union via Kongsberg of Norway was a classic case of circumvention of the Cold War-era Coordinating Committee for Multilateral Export Controls (COCOM) regime. Then, too, stakeholders within the corporate distribution network knowingly used a third-country route, and as a result, the U.S. imposed sanctions on Toshiba and demanded that the Japanese government strengthen its enforcement of export controls. The swift indictment by Taiwanese prosecutors in the current case can be read as following the same pattern, where an ally deals with its own companies' violations to preempt direct U.S. sanctions.

A more recent precedent is the case of Nvidia GPU circumvention via Singapore in 2023 and 2024. Singapore was a major region for Nvidia's recorded sales, yet numerous transactions were reported where the actual final destination was elsewhere. The common thread between this case and the Taiwan incident is that the whitelist and End-User Certificate (EUC) systems fail to completely control the actual flow of goods. The structural vulnerability where the paper-approved buyer is separate from the actual end-user has repeatedly emerged.

4. Key Variables Shaping Future Developments

The first variable is the severity of punishment by Taiwanese prosecutors and the sustainability of follow-up measures. Whether the maximum five-year sentence sought in this indictment is actually handed down and whether a continuous monitoring system for similar cases is established will be key to its deterrent effect [10].

The second variable is the redesign of internal compliance at Nvidia and Supermicro. Nvidia has stated its intention to cooperate with Taiwanese authorities [11], but the extent to which they strengthen whitelist vetting and post-sale monitoring will determine whether such incidents recur.

The third variable is the diversification of server distribution routes. As shown by the surge in Mexico's imports of Taiwanese computers [12], if U.S. scrutiny focuses on Taiwan, smuggling attempts are likely to shift to third-party logistics hubs.

The fourth variable is the speed of China's domestic production of AI accelerators. If sales of domestic substitutes like those from Cambricon continue to grow [6], the relative incentive to acquire Nvidia chips through smuggling may gradually decrease. Conversely, if domestic production stagnates, the price premium will remain, and circumvention attempts will continue.

The fifth variable is the response of the U.S. Department of Commerce's Bureau of Industry and Security (BIS). Whether it amends regulations to strengthen end-user verification obligations for allies in the wake of this incident, or limits its response to sanctioning individual companies, will determine the level of compliance burden for supply chain participants, including South Korea.