US closes chip loophole, blocking 200,000 Chinese AI servers

The US Commerce Department on June 1 closed a loophole that allowed Chinese-owned companies to buy advanced AI chips through overseas subsidiaries, a shift that blocks an estimated 200,000 servers from reaching Chinese-controlled entities through Malaysia, Singapore and the UAE.

"The guidance applies the same standard Treasury has used for financial sanctions for decades — follow the beneficial owner, not the shipping address," said a BIS official who spoke on condition of anonymity because the guidance had not been formally announced. The rule moves export enforcement from a geography-based model to a beneficial-ownership framework, mirroring OFAC's 50% ownership threshold.

Before the change, a ByteDance subsidiary in Singapore or a Baidu AI research center in Malaysia could order Nvidia Blackwell GB200 NVL72 systems, Nvidia Rubin-class hardware and AMD MI350x accelerators without triggering export controls — as long as the entity was incorporated outside China and not on the BIS Entity List. The South China Morning Post, citing an industry source, estimated the volume of hardware that flowed through the gap at "hundreds of thousands of servers" over roughly 12 months. Tom's Hardware reported that BIS internal estimates put the number even higher.

The guidance creates immediate compliance exposure for cloud providers operating in Asia Pacific. AWS, Google Cloud and Microsoft Azure all run large data centers in Singapore and Malaysia where enterprise tenants include subsidiaries of Chinese parent companies. If a Chinese-parented company's Singapore subsidiary runs Blackwell or Rubin GPU workloads on AWS infrastructure, that could constitute an export control violation — by the Chinese company and potentially by the cloud provider for serving the account with knowledge of the ownership structure. Enhanced due diligence on account ownership, currently not standard practice, becomes necessary, and service termination for non-compliant tenants is now a scenario legal teams must model.

The affected companies span Chinese AI cloud providers — Alibaba Cloud, Baidu AI Cloud, Tencent Cloud and ByteDance — as well as AI research labs including DeepSeek, Zhipu AI and Moonshot AI that operate international offices. Chinese fintech firms using GPU compute for quantitative modeling in Singapore's financial district are also in scope. BIS has not published a specific ownership threshold, but the OFAC 50% rule is the likely model, leaving ambiguity for joint ventures with mixed ownership.

The June 1 guidance is the most aggressive extraterritorial AI chip enforcement action the US has taken. It signals that geography is no longer a reliable shield for Chinese companies seeking chip access. BIS is expected to add entities such as Alibaba Cloud Singapore and ByteDance Ireland to an expanded version of the entity list in coming months, not for specific violations but as a prophylactic measure to eliminate ambiguity. For developers and DevOps teams in APAC, the compliance window for remediating existing deployments is likely measured in months, not years.

This article is for informational purposes only and does not constitute investment advice.