Before it erupts in public, a certain type of tension develops subtly within Washington. Executives at some of America’s most closely watched AI labs had been observing odd behavioral patterns from accounts that didn’t quite feel like regular users for months. Thousands of them probed, extracted, and tested the boundaries of systems that required years of human labor and billions of dollars to construct. That subdued tension finally surfaced last week.
In a memo written by Michael Kratsios, the director of the Office of Science and Technology Policy, the White House officially accused Chinese organizations of conducting “deliberate, industrial-scale campaigns” to steal the capabilities built into the most cutting-edge AI models in the United States. The process of training smaller, less expensive models using the outputs of larger, more potent ones is called distillation, and it’s not exactly a novel idea in AI circles. However, using jailbreaking techniques to remove security measures and reveal confidential information through tens of thousands of proxy accounts is a completely different matter. It’s not research. It’s a pipeline.
| Key Information | Details |
|---|---|
| Event | White House accuses China of industrial-scale AI technology theft |
| Key Figure | Michael Kratsios, Director, White House Office of Science and Technology Policy |
| Document | Internal memo shared publicly via social media, first reported by the Financial Times |
| Date of Memo | April 23, 2026 |
| Method of Theft Alleged | Distillation via tens of thousands of proxy accounts and jailbreaking techniques |
| Primary Target | U.S. frontier AI systems, including those developed by OpenAI and Anthropic |
| U.S. Response | Information sharing with AI firms, developing countermeasures, accountability measures under exploration |
| China’s Response | Chinese Embassy denies allegations; calls them “baseless” and “unjustified suppression” |
| Broader Context | Memo released weeks before Trump’s planned visit to Beijing to meet President Xi Jinping |
| Chip Trade Factor | Questions raised over Nvidia H200/H20 chip sales to China; Commerce Secretary confirmed no shipments yet made |
| Reference | Reuters Full Report |
It’s difficult to ignore that this memo arrived at an oddly sensitive time. After years of a technological cold war, President Trump is expected to visit Beijing in a few weeks to meet with Xi Jinping. This visit was meant to signify a gradual thaw. Whether timed or not, the memo seriously disrupts that story. In Washington, there’s a feeling that this was something that someone wanted recorded before they shook hands.
The fact that the accusation isn’t wholly unprecedented lends it some credibility. In a letter to Congress back in February, OpenAI’s leadership raised similar concerns about ongoing attempts to distill their systems. According to reports, Anthropic has been under similar pressure. The White House memo essentially reaffirms what the private sector had previously stated, but it does so with the support of government intelligence. It’s still unclear if that intelligence is as strong as the language suggests.
China responded quickly and contemptuously. The accusations were deemed unfounded by the embassy in Washington, and Beijing’s foreign ministry called on the United States to “abandon biases.” At this point, watching that exchange unfold over a single news cycle—accusation, denial, and counter-accusation—feels almost staged. However, there’s something more acute and less tactful about this particular round. According to Kratsios, the models purportedly created by these distillation campaigns do more than simply replicate American AI capabilities. They remove the safety precautions, creating instruments that appear capable on the outside but conceal what the memo refers to as national security threats.
In all of this, Nvidia is positioned awkwardly. In January, the Trump administration approved the company’s sale of its potent H200 chips to China, a move that caused significant controversy within the Republican Party. According to Commerce Secretary Howard Lutnick, no shipments have yet to be completed. It’s possible that the chip issue and the accusations of AI theft are being handled in tandem behind closed doors, two pressure points on the same lever that are being carefully used in advance of a diplomatic summit with high stakes for both parties.
In a larger sense, this competition has become too uncomfortable for either nation to fully accept. The claim being made now is that Beijing discovered a way to obtain the DNA of America’s groundbreaking AI systems without having to pay for the years of labor that went into creating them. There isn’t a clear solution in sight. The summit will take place, people will greet each other, and the proxy accounts will most likely continue to try back in the server rooms.
