It is said that there is a warehouse in China full of brand-new, unopened Nvidia H200 servers still in their original packaging. Videos of this warehouse have been shared on social media as if they were a product launch. Nothing for the press. There is no authorized distributor. The only sounds are boxes and the sound of an underground supply chain that no longer needs to be hidden.
That picture, which is disturbing in its casualness, says more about how U.S. controls on technology exports are right now than most policy briefings ever could.
The U.S. government has spent years putting up legal barriers around its most advanced AI hardware, especially Nvidia’s high-performance chips, which are at the center of the AI race around the world. Starting in 2022, export limits got a lot stricter. For national security reasons, newer generations of chips, like the Blackwell and Hopper series, were not allowed to be sold to China. The controls looked bad on paper. It is said that at least $1 billion worth of restricted hardware has been brought into China through this black market.
It’s important to understand how this trade works because it’s not simple. Brokers in Malaysia, Vietnam, and Taiwan buy chips from licensed sellers and then sell them to people in China for a lot more than they paid for them. Data center operators are among those who buy. Some give Chinese AI research groups what they need. It seems likely that some of them are used for things other than commercial computing. In a known deal, a seller in Shenzhen set up delivery of twelve Blackwell servers, with eight AI processors on each, to a customer in Shanghai. The customer put $3 million into escrow before the shipment even left Shenzhen. That’s not a desperate act. That’s a well-run market.
When Nvidia heard about the smuggling, they did what they were supposed to do, which wasn’t completely wrong. It is “a losing proposition, both technically and economically,” a company spokesperson told CNBC about building data centers from illegal products. The spokesperson also said that Nvidia only supports and services authorized products. That is true. Support contracts make it easier to maintain, update, and fix problems on a large scale for chips that don’t have them. But it looks like the buyers chose that unreliable access to cutting-edge hardware is better than having no access at all. That calculation makes sense when you think about what’s at stake in the global AI competition.
The fact that the smuggling networks have become so aggressive is what makes this trade so hard to stop. Reports say that serial numbers from restricted chips are being printed on older equipment to make inspectors think they are something else. So that alerts don’t go off, big orders are split up into smaller shipments. Shell companies that aren’t based in China make the purchases, which seems to be legal at first glance. Then, the goods quietly cross borders. Reports say that some traders are so at ease that they post ads for available stock on social media. It’s not clear if that confidence comes from real freedom or just carelessness, or maybe both.
Both the U.S. government and Nvidia have fought back. Companies that make chips have tightened their “Know Your Customer” rules. Reports say that authorities in Taiwan and Singapore are paying more attention to high-tech exports. CEO Jensen Huang said last week that Nvidia would start selling its H20 chips to China again after reaching a regulatory agreement with the Trump administration. This shows that the company understands that strict rules don’t always have the desired effect and can send money to illegal markets instead.
It’s still not clear how much of the illegal hardware is being used for commercial AI development and how much is being used for more troubling purposes, like military research, surveillance infrastructure, and facial recognition systems used for political repression. China isn’t just interested in academically buying advanced AI processors. The country is working hard to build up its own semiconductor industry, but it is years behind U.S. companies in this area. In the meantime, silicon that has been stolen fills the void.
As I’ve watched this situation change over the past few years, I can’t help but notice a pattern: within months of a new restriction being put in place, a new way to get around it appears. Export controls only work if they are completely sealed and coordinated across the whole world. Neither of those conditions is true right now. The warehouses will keep getting full until they do.
