Onpode
Cover art for How a blacklisted Chinese tech giant kept buying Nvidia's best AI chips despite US sanctions

How a blacklisted Chinese tech giant kept buying Nvidia's best AI chips despite US sanctions

September 7, 2026 · 10 min

Jonathan Ingles & Ben Okonkwo

Aivres Systems Inc., a Silicon Valley subsidiary of Chinese military-blacklisted Inspur Group, moved $5.6 billion worth of Nvidia Blackwell-generation AI chips to Southeast Asia between April 2024 and February 2026 — exploiting a legal gap where the U.S. Entity List named the parent company but not its American-incorporated subsidiary.

A New York Times investigation published September 6, 2026, revealed that Inspur Group — a Chinese technology company blacklisted by the U.S. in 2023 for its work with the Chinese military — continued acquiring Nvidia's most advanced AI chips through its Silicon Valley subsidiary, Aivres Systems Inc.

0:0010:25
Get the next episode on World

Follow it free — new episodes land in your feed.

Or make your own — any topic, in minutes

More Onpode episodes on World

About this episode

In April 2024, a Silicon Valley company called Aivres Systems began moving Nvidia's most powerful AI chips toward Southeast Asia. By February 2026, according to shipment records and corporate documents examined by the New York Times, it had moved $5.6 billion worth. The catch: Aivres is a subsidiary of Inspur Group, which the US government blacklisted in 2023 for ties to the Chinese military. The parent was banned. The subsidiary wasn't. That gap — between a named entity and its corporate children — turns out to be the central mechanism of the entire story. This episode traces how that mechanism works across three simultaneous procurement channels: the subsidiary loophole, the transshipment route through Singapore and Malaysia, and an open-air secondary market in Shenzhen. It then pulls back to ask a harder question about the regulatory framework itself — specifically, what a 15-month window of formal silence after the AI Diffusion Rule's partial suspension was actually worth, and to whom. Commerce authorized roughly ten Chinese companies to buy H200 chips during the same period BIS was supposedly running an enforcement campaign. That's not a capacity problem. That's a different kind of problem. The episode doesn't resolve the intent question — the evidence doesn't support that — but it lays out a sequence that's difficult to read as pure administrative backlog.

Frequently asked

How did a blacklisted Chinese company keep buying Nvidia AI chips despite US sanctions?

Inspur Group, blacklisted by the U.S. Bureau of Industry and Security in 2023, operated through Aivres Systems Inc., a separately incorporated Silicon Valley subsidiary not named on the Entity List. Aivres bought Nvidia chips as a domestic U.S. buyer, then routed shipments through Singapore, Malaysia, and Thailand using falsified export documents.

How much did Aivres Systems ship in Nvidia chips to Southeast Asia?

Aivres Systems Inc. moved approximately $5.6 billion in Nvidia AI chips — including Blackwell-generation hardware — to Southeast Asia over roughly 22 months, from April 2024 to February 2026, according to shipment records and supply contracts examined by The New York Times.

What is the AI Diffusion Rule and why was its suspension significant for chip smuggling?

The Biden-era AI Diffusion Rule restricted the most powerful AI chips to close U.S. allies. When Commerce partially suspended it in May 2025 without formal clarification on licensing requirements, the resulting 15-month regulatory silence allowed companies to sell advanced chips to Chinese-linked firms outside China. The gap was not closed until August 25, 2026.

Has anyone been prosecuted for smuggling Nvidia chips to China?

Enforcement has been limited relative to known volumes. Texas-based Hao Global entered a guilty plea over $160 million in Nvidia H100 and H200 chips. BIS targeted freight forwarder Apex Logistics on August 28, 2026 — the first such action against transshipment infrastructure. The federal inquiry into Aivres, which moved $5.6 billion, had unknown status as of September 2026.

Did the US government actually authorize Chinese companies to buy Nvidia H200 chips?

Representative Joaquin Castro, citing a DoD report, stated that Commerce authorized roughly ten Chinese companies to purchase Nvidia H200 chips — occurring during the same period BIS was running an export-control enforcement campaign. Commerce subsequently issued a specific ban on H200 indirect export routes on August 25, 2026.

Grounded in 9 sources
Trump Trade Enforcers Deploy AI in Tariff Evasion Crackdown - Bloomberg · bloomberg.com
人工智慧軍備競賽:中國快速進步,美國政策搖擺 - 紐約時報中文網 · cn.nytimes.com
Anthropic distillation battle turns to dark web, China concerns swell · cnbc.com
The U.S. banned Nvidia's best chips from going to China. Now it's trying to close a crucial loophole · cnbc.com
A Blacklisted Chinese Tech Giant Kept Buying Nvidia's Best A.I. Chips · nytimes.com
Ball game's over—the US is out of the AI chip market in China · brookings.edu
OpenAI and Google are selling AI to blacklisted Chinese ... · thenextweb.com
Nvidia's Asian Buyer Whitelist and the Gaps in US Chip Export Controls - CISES · cises.org
Aivres acquires US AI chips despite parent company's ... · cryptobriefing.com
Read transcript

Ben Okonkwo: Jonathan, I want to try something different with you today — I want to just describe a scene and see what your instinct says before I give you any of the policy context.

Jonathan Ingles: Go ahead.

Ben Okonkwo: There's a company with a Silicon Valley address. Ordinary name — Aivres Systems Inc. It acquires Nvidia's most advanced AI chips, the Blackwell generation, and ships them to Southeast Asia. Now: the shipment records exist. Thousands of them. Corporate documents, supply contracts. The New York Times examined all of it and put a number on what moved between April 2024 and February 2026.

Jonathan Ingles: What's the number?

Ben Okonkwo: Five point six billion dollars.

Jonathan Ingles: In twenty-two months.

Ben Okonkwo: Right — and now the detail that reframes all of it: Aivres is a subsidiary of Inspur Group. Which the U.S. government blacklisted in 2023 for ties to the Chinese military. The Bureau of Industry and Security put Inspur on the Entity List. And then, apparently, Inspur's American subsidiary spent the next two-plus years moving Nvidia's frontier chips through Southeast Asia. So — what's your instinct? Before I tell you how BIS responded.

Jonathan Ingles: My instinct is that someone knew. The question is whether it was negligence or something else entirely.

Ben Okonkwo: And that's where the mechanism gets clarifying, because — okay, so negligence versus complicity, right, but there's something underneath that. The Entity List names Inspur Group. It doesn't name Aivres Systems Inc. Those are two different legal entities. Separate incorporation. Separate U.S. address. The ban hits the parent, not its children. It's like — a barred customer sends a family member into the store. The store follows the rules. The chips still move.

Jonathan Ingles: That's the whole trick.

Ben Okonkwo: That's the whole trick. And Aivres is incorporated in Silicon Valley, which means it looks — on paper — like a U.S. domestic buyer. Then the shipments go southeast. Singapore shell structures, transshipment through Malaysia and Thailand. Falsified export documents at various points in the chain.

Jonathan Ingles: Okay, but here's what I want to know — is Aivres the outlier or is this pattern running everywhere?

Ben Okonkwo: It's a pattern. And it's — actually, this is the part I find genuinely alarming — it's now moved to the software layer. OpenAI and Google have reportedly sold AI services to blacklisted Chinese firms operating through Singapore subsidiaries. Same logic, different product. You can't ship the chip so you buy the model inference through a clean-looking Singapore address.

Jonathan Ingles: Wait — OpenAI and Google, not some offshore broker.

Ben Okonkwo: Not some offshore broker. The same subsidiary loophole logic, running at the compute-services layer. The blacklisted entity sits one corporate step behind a Singapore entity and the sale is technically clean.

Jonathan Ingles: And meanwhile Nvidia A100s and H100s were covertly trading in Huaqiangbei — Shenzhen's physical electronics market — as of June 2023. So you've got three parallel procurement channels running simultaneously: the subsidiary route, the transshipment route, and an open-air black market. The Entity List is one instrument against all three of those.

Ben Okonkwo: Which is why the BIS investigation into Apex Logistics — the freight forwarder they went after on August 28th, 2026 — is interesting as a signal. That's the first freight forwarder targeted in this whole campaign. It tells you BIS is starting to chase the transshipment infrastructure, not just the end buyer. Whether that's too late given the volumes is a different question.

Jonathan Ingles: But that's the enforcement scorecard, right — that's where I want to stop. Because Apex Logistics is August 28th, 2026. Years in. One freight forwarder. And on the guilty plea side you have Hao Global, Texas-based, $160 million in H100s and H200s. One plea. Meanwhile Aivres moved $5.6 billion. That's thirty-five times the amount that actually got prosecuted.

Ben Okonkwo: Thirty-five times — and the federal inquiry into Aivres itself? As of the Times investigation in September 2026, status unknown. Begun, apparently. That's all we have.

Jonathan Ingles: Unknown status. On five point six billion dollars.

Ben Okonkwo: Now — I want to be careful here, because there's a version of this where BIS is structurally slow, not strategically blind. Investigations take time, evidence chains across Southeast Asian transshipment routes are genuinely hard to reconstruct. But even granting all of that... a Senate letter had to warn Howard Lutnick directly about large-scale chip smuggling. And Joaquin Castro — he cited a DoD report showing Commerce actually authorized roughly ten Chinese companies to buy Nvidia H200 chips. Authorized. Not missed. Authorized.

Jonathan Ingles: Wait — Commerce authorized ten Chinese companies to buy H200s while BIS is supposedly running an enforcement campaign?

Ben Okonkwo: That's what Castro put in the record. Which is — I mean, that's the thing that doesn't fit the capacity argument. You can explain slow investigation as underfunding. You can't explain active authorization as underfunding. Those are different problems.

Jonathan Ingles: So Jeffrey Kessler is sitting in front of House lawmakers getting asked whether export controls can actually keep Blackwell chips out of China's hands — and the honest answer, given that scorecard, is probably no. Not because the rules don't exist. Because the rules and the authorizations are running in opposite directions simultaneously.

Ben Okonkwo: And the authorization question connects to something we haven't gotten to yet — the AI Diffusion Rule suspension in May 2025, and whether the ambiguity that followed was genuinely accidental or whether it was doing work for someone.

Jonathan Ingles: That gap is the real story. And frankly it's worse than it looks from here.

Ben Okonkwo: Right — but the authorization point actually makes the Diffusion Rule suspension weirder, not cleaner. Because the Biden-era AI Diffusion Rule was specific: most powerful chips flow freely only to close U.S. allies. Hard ceiling. Then Commerce partially suspends it in May 2025 and — this is the part that matters — never issues formal clarification on whether licensing requirements stayed active. That silence is load-bearing.

Jonathan Ingles: Companies read the silence as permission.

Ben Okonkwo: Some American companies concluded they were free to sell advanced chips to Chinese firms operating outside China. Now — I want to be precise here, because that's not obviously bad faith. Regulatory ambiguity genuinely does that. Companies have compliance lawyers who look at unclear guidance and extrapolate in the direction of their revenue. That's not conspiracy, that's just how ambiguity functions.

Jonathan Ingles: But look — Aivres is shipping peak volume between April 2024 and February 2026. That window swallows the suspension whole. Commerce goes quiet in May 2025 and the gap doesn't get patched until August 25th, 2026, when BIS specifically bans Nvidia H200 models from indirect export routes. Fifteen months of formal silence. That's not a drafting delay.

Ben Okonkwo: Fifteen months is — yeah, that number is hard to explain as administrative backlog.

Jonathan Ingles: And the August 2026 tightening implicitly admits the gap was real the entire time. You don't write a rule that specifically bans H200 indirect export routes unless indirect export routes were moving H200s. The rule is its own confession.

Ben Okonkwo: That's — actually, that framing works. The sequence itself is the mechanism. Rule, suspension, silence, exploitation, belated patch. Whether the ambiguity was intentional or genuine sloppiness, the damage is structurally identical. Aivres doesn't need Commerce to wink at it. It just needs Commerce to not speak.

Jonathan Ingles: So the question I can't answer — and frankly I'm not sure BIS can answer it either — is whether anyone at Commerce ran the math on what fifteen months of ambiguity was worth to Nvidia's revenue before deciding not to clarify.

Ben Okonkwo: And that's where my evidence chain runs out. I can show you the sequence. I can show you $5.6 billion overlapping with the suspension window almost exactly. What I can't show you is intent. The Brookings assessment is that the U.S. is now essentially out of the AI chip market in China — but that's a post-hoc reading, not proof of design.

Jonathan Ingles: The part that sticks with me — and I keep landing here — is that every time BIS draws a tighter line, the routing just mutates. August 2022, A100 and H100 restrictions. Then the interconnect-bandwidth workarounds. Then the H200 indirect-route ban in August 2026. Each one met with a new channel, not cessation. The controls aren't stopping procurement. They might be teaching it to be more sophisticated.

Ben Okonkwo: And while the routing mutates, China files another patent on a domestic chip. I can't shake this — Huaqiangbei is running, the subsidiary loophole is running, and simultaneously Huawei is closing the gap on indigenous silicon. The Brookings read is that the U.S. is effectively out of the Chinese AI chip market now. So we may have forfeited the commercial influence without achieving the denial. That's... not a good trade, if true.

Jonathan Ingles: The Aivres case ends up being less about smuggling and more about that. It's the moment the enforcement-is-the-bottleneck argument becomes undeniable. Not the rules. The rules exist. It's whether anyone can catch the next routing scheme before $5.6 billion moves through it.

Ben Okonkwo: Yeah. And whether the next battle is even over chip rules at all — or whether it shifts entirely to cloud compute infrastructure restrictions. That question's genuinely open.

Jonathan Ingles: Genuinely open is probably the most honest place we've been all conversation. I'll take it.