Within Chip Controls

Where AI chip controls can leak

Export controls can leak through cloud access, intermediaries, subsidiaries, and smuggling, making enforcement central to their safety value.

On this page

  • Cloud access and overseas subsidiaries
  • Intermediaries, smuggling, and grey markets
  • What stronger enforcement can and cannot fix
Preview for Where AI chip controls can leak

Introduction

Whether AI chip export controls reduce existential risk depends not only on the rules themselves but on how effectively they can be enforced. For people worried about AI doom, loss of control, or the rapid development of highly capable AI systems, export controls matter because advanced AI training still depends heavily on scarce computing hardware. However, a control that exists on paper may have little practical effect if organisations can obtain equivalent computing power through cloud services, overseas subsidiaries, intermediaries, or smuggling networks.

Loopholes illustration 1 As a result, the debate has increasingly shifted from whether chip controls exist to whether they can be enforced. The central question is not simply how many chips are blocked, but how much frontier-scale compute remains accessible despite the restrictions.

Cloud access and overseas subsidiaries

One of the most discussed loopholes is remote access to controlled hardware.

Traditional export controls were designed around physical goods crossing borders. AI development complicates this model because a company does not necessarily need to own a chip to use it. Instead, it can rent computing power from cloud providers operating large data centres. Researchers and policymakers have repeatedly noted that access to advanced AI chips through cloud services can partially bypass restrictions aimed at physical exports. [CSET]cset.georgetown.eduCSETControlling Access to Advanced Compute via the CloudMay 15, 2023 — 15 May 2023 — This post identifies situations where it appears US export controls can be used to restrict cloud computing…Published: May 15, 2023 [Governance AI]cdn.governance.aiAccessing Controlled AI Chips via Infrastructure as a ServiceGovernance AIAccessing Controlled AI Chips via Infrastructure-as-a-…15 Dec 2023 — Compared to physical chips, access to compute throug…

This issue became widely known as the “cloud loophole”. Under earlier rules, an organisation could potentially access computing resources hosted outside a restricted country even if it could not legally import the underlying hardware. Policymakers have proposed new reporting and licensing requirements specifically because cloud access creates a route around traditional export controls. [exportcompliancemanager.com]exportcompliancemanager.comChinese companies can train their AI models by remotely accessing the US cloud…Read more… [introl]introl.comremote access security act cloud loophole export controls 2026IntrolRemote Access Security Act | Introl Blog23 Jan 2026 — Current export controls prohibit selling advanced AI chips directly to China… For AI existential-risk discussions, this matters because many proposed compute-governance systems assume that access to frontier-scale computing can be monitored. If large training runs can simply move to rented infrastructure, enforcement becomes significantly harder.

A related challenge involves overseas subsidiaries and affiliated companies. Recent US guidance was introduced partly to address concerns that Chinese-headquartered firms could obtain advanced AI chips through foreign subsidiaries operating outside mainland China. Regulators concluded that existing controls were vulnerable to this route and moved to clarify that licensing requirements apply to covered entities regardless of where particular subsidiaries are located. [Reuters]reuters.comDepartment of Commerce announced new guidance aimed at closing a loophole that potentially allowed subsidiaries of Chinese companies outs…

The broader lesson is that modern corporate structures often cross many jurisdictions. Determining who ultimately controls a company, data centre, or training project can be much harder than determining where a shipment is physically delivered.

Intermediaries, smuggling, and grey markets

Physical smuggling remains another major enforcement challenge.

Several investigations and prosecutions have revealed attempts to move restricted AI hardware through intermediaries, shell companies, false documentation, relabelling schemes, and third-country transit routes. Recent cases have involved alleged shipments routed through jurisdictions such as Hong Kong, Japan, Malaysia, Singapore, and other intermediary locations before reaching intended end users. [Tom's Hardware]tomshardware.comefforts to curb AI chip transfers. Prosecutors reported seizing 50 Super Micro servers with falsified documents, intended for Hong Kong v… [Reuters From an AI-risk perspective]reuters.comDepartment of Commerce announced new guidance aimed at closing a loophole that potentially allowed subsidiaries of Chinese companies outs…, the significance is not that every restricted chip can be smuggled. Rather, even modest leakage may matter if the goal is to limit access to the largest training clusters.

Several recurring patterns appear in enforcement cases:

  • Shell companies and front companies that obscure the true buyer.
  • False end-user declarations claiming hardware is intended for permitted uses.
  • Transshipment through third countries before final delivery.
  • Relabelling or misclassification of hardware and servers.
  • Grey-market resale networks that move hardware after the initial sale. [BISI]bisi.org.ukBISIAI Chip Smuggling: The Limits of US Export ControlsApril 6, 2026 — 6 Apr 2026 — The cases demonstrate that restricting chip exports does not prevent actors from obtaining US hardware throu… [Reuters]reuters.comJustice Department has charged two Chinese men, Fanyue Gong and Benlin Yuan, with attempting to illegally smuggle Nvidia's advanced H100…

Analysts studying export-control evasion argue that sophisticated procurement networks can exploit gaps between customs systems, corporate registries, and compliance processes. The challenge becomes especially difficult when hardware passes through multiple countries before reaching its final destination. [CSIS Website]csis-website-prod.s3.amazonaws.comCSIS Website Mapping the Chip Smuggling Pipeline and ImprovingCSIS WebsiteMapping the Chip Smuggling Pipeline and Improving…April 9, 2024 — This will be implemented through a series of policies th…Published: April 9, 2024

This does not mean controls are useless. Smuggling raises costs, increases uncertainty, and limits scale. But it does mean that enforcement success should not be measured as a simple binary of “chips exported” versus “chips blocked”. The practical question is how much compute capacity ultimately reaches restricted actors and at what cost.

Loopholes illustration 2

Why loopholes matter differently for AI doom arguments

Not every argument for export controls requires perfect enforcement.

Some AI doom researchers view chip controls primarily as a delaying mechanism. Under that view, reducing access by 50% may still be valuable even if some leakage occurs. If progress toward highly capable AI systems depends on access to very large compute clusters, making those clusters more expensive or slower to assemble could buy time for alignment research, evaluations, monitoring systems, and international coordination.

However, other theories of risk depend on much stronger enforcement.

For example, proposals involving compute thresholds, mandatory reporting of large training runs, or international monitoring of frontier AI development assume that governments can identify where the largest concentrations of compute exist. If organisations can easily distribute training across multiple jurisdictions or obtain compute through opaque intermediaries, those governance systems become harder to implement. [Governance AI]cdn.governance.aiAccessing Controlled AI Chips via Infrastructure as a ServiceGovernance AIAccessing Controlled AI Chips via Infrastructure-as-a-…15 Dec 2023 — Compared to physical chips, access to compute throug…

Critics of hardware-focused approaches also argue that software improvements can reduce dependence on the most advanced chips. If algorithmic efficiency improves quickly enough, organisations may be able to achieve important capability gains using less restricted hardware. That possibility could weaken the long-term impact of chip controls even if enforcement is relatively effective. [arXiv]arxiv.orgSource details in endnotes.

What stronger enforcement can and cannot fix

Many proposals seek to reduce these loopholes rather than merely expand export bans.

Common suggestions include:

  • Stronger know-your-customer requirements for cloud providers.
  • More detailed scrutiny of beneficial ownership and corporate control.
  • International cooperation on customs enforcement.
  • Monitoring of unusually large compute purchases.
  • Hardware security features that make chips easier to track or audit.
  • Licensing systems tied to the activation or operation of advanced chips. [arXiv]arxiv.orgSource details in endnotes. [Governance AI]cdn.governance.aiAccessing Controlled AI Chips via Infrastructure as a ServiceGovernance AIAccessing Controlled AI Chips via Infrastructure-as-a-…15 Dec 2023 — Compared to physical chips, access to compute throug… [CSIS Website]csis-website-prod.s3.amazonaws.comCSIS Website Mapping the Chip Smuggling Pipeline and ImprovingCSIS WebsiteMapping the Chip Smuggling Pipeline and Improving…April 9, 2024 — This will be implemented through a series of policies th…Published: April 9, 2024

Some researchers have proposed hardware-level governance systems, such as on-chip monitoring, cryptographic verification, or licensing mechanisms that could make unauthorised use easier to detect. Yet many of these ideas remain technically immature and face significant implementation challenges. [arXiv]arxiv.orgSource details in endnotes.

Even the strongest enforcement regime would not solve every problem. Export controls cannot directly prevent algorithmic breakthroughs, open publication of techniques, domestic chip development, or the emergence of alternative computing architectures. They mainly target one bottleneck: access to large amounts of advanced compute.

That limitation is important for existential-risk analysis. If AI doom scenarios depend heavily on frontier-scale computing, enforcement quality may substantially affect risk trajectories. If future AI progress proves less dependent on scarce hardware than many expect, closing loopholes may provide only temporary advantages.

Loopholes illustration 3

The bottom line

The effectiveness of AI chip export controls depends at least as much on enforcement as on the formal rules themselves. Cloud computing, overseas subsidiaries, intermediary firms, smuggling networks, and grey markets all create routes through which access to advanced compute can leak. [exportcompliancemanager.com]exportcompliancemanager.comChinese companies can train their AI models by remotely accessing the US cloud…Read more… [Reuters For advocates of compute governance]reuters.comDepartment of Commerce announced new guidance aimed at closing a loophole that potentially allowed subsidiaries of Chinese companies outs…, these loopholes are not a side issue but the central implementation challenge. Export controls may still slow capability growth, raise costs, and buy time for safety work even when enforcement is imperfect. But their value for reducing AI existential risk ultimately depends on whether governments can meaningfully constrain access to the largest concentrations of frontier computing power rather than merely redirect how that access is obtained. [CSIS Website]csis-website-prod.s3.amazonaws.comCSIS Website Mapping the Chip Smuggling Pipeline and ImprovingCSIS WebsiteMapping the Chip Smuggling Pipeline and Improving…April 9, 2024 — This will be implemented through a series of policies th…Published: April 9, 2024 [Governance AI]cdn.governance.aiAccessing Controlled AI Chips via Infrastructure as a ServiceGovernance AIAccessing Controlled AI Chips via Infrastructure-as-a-…15 Dec 2023 — Compared to physical chips, access to compute throug…

Amazon book picks

Further Reading

Books and field guides related to Where AI chip controls can leak. Use these as the next step if you want deeper reading beyond the article.

eBay marketplace picks

Marketplace Samples

Example marketplace items related to this page. Use the search link to explore similar finds on eBay.

Using USA

Endnotes

  1. Source: cset.georgetown.edu
    Title: CSETControlling Access to Advanced Compute via the Cloud
    Link: https://cset.georgetown.edu/article/controlling-access-to-advanced-compute-via-the-cloud/
    Source snippet

    May 15, 2023 — 15 May 2023 — This post identifies situations where it appears US export controls can be used to restrict cloud computing...

    Published: May 15, 2023

  2. Source: cdn.governance.ai
    Title: Accessing Controlled AI Chips via Infrastructure as a Service
    Link: https://cdn.governance.ai/Accessing_Controlled_AI_Chips_via_Infrastructure-as-a-Service.pdf
    Source snippet

    Governance AIAccessing Controlled AI Chips via Infrastructure-as-a-...15 Dec 2023 — Compared to physical chips, access to compute throug...

  3. Source: exportcompliancemanager.com
    Link: https://exportcompliancemanager.com/articles/will-the-remote-access-security-act-close-the-cloud-loophole-in-the-us-export-administration-regulations/
    Source snippet

    Chinese companies can train their AI models by remotely accessing the US cloud...Read more...

  4. Source: introl.com
    Title: remote access security act cloud loophole export controls 2026
    Link: https://introl.com/blog/remote-access-security-act-cloud-loophole-export-controls-2026
    Source snippet

    IntrolRemote Access Security Act | Introl Blog23 Jan 2026 — Current export controls prohibit selling advanced AI chips directly to China...

  5. Source: reuters.com
    Link: https://www.reuters.com/world/china/us-takes-step-halt-nvidia-ai-chip-shipments-chinese-firms-outside-china-2026-05-31/
    Source snippet

    Department of Commerce announced new guidance aimed at closing a loophole that potentially allowed subsidiaries of Chinese companies outs...

  6. Source: reuters.com
    Link: https://www.reuters.com/world/china/us-justice-department-accuses-two-chinese-men-trying-smuggle-nvidia-chips-2025-12-09/
    Source snippet

    Justice Department has charged two Chinese men, Fanyue Gong and Benlin Yuan, with attempting to illegally smuggle Nvidia's advanced H100...

  7. Source: arxiv.org
    Link: https://arxiv.org/abs/2604.04712

  8. Source: arxiv.org
    Title: arXiv Whack-a-Chip: The Futility of Hardware-Centric Export Controls
    Link: https://arxiv.org/abs/2411.14425
    Source snippet

    arXivWhack-a-Chip: The Futility of Hardware-Centric Export ControlsNovember 21, 2024...

    Published: November 21, 2024

  9. Source: arxiv.org
    Link: https://arxiv.org/abs/2404.18308

  10. Source: csis.org
    Title: Understanding U.S
    Link: https://www.csis.org/analysis/understanding-us-allies-current-legal-authority-implement-ai-and-semiconductor-export
    Source snippet

    Allies' Current Legal Authority to...14 Mar 2025 — This paper provides an in-depth analysis of US allies' export control authorities rel...

  11. Source: tomshardware.com
    Link: [https://www.tomshardware.com/tech-industry/artificial
    Source snippet

    efforts to curb AI chip transfers. Prosecutors reported seizing 50 Super Micro servers with falsified documents, intended for Hong Kong v...

  12. Source: csis-website-prod.s3.amazonaws.com
    Title: CSIS Website Mapping the Chip Smuggling Pipeline and Improving
    Link: https://csis-website-prod.s3.amazonaws.com/s3fs-public/2024-04/240409_Harithas_Chip_Smuggling.pdf?VersionId=894hzMieB.qJHkVVH2HS7g2m49.a92KR
    Source snippet

    CSIS WebsiteMapping the Chip Smuggling Pipeline and Improving...April 9, 2024 — This will be implemented through a series of policies th...

    Published: April 9, 2024

Additional References

  1. Source: businessinsider.com
    Link: https://www.businessinsider.com/nvidia-gpu-smuggling-operation-china-doj-arrests-2025-12
    Source snippet

    authorities have dismantled a sophisticated chip-smuggling network that illegally exported Nvidia’s top-tier AI GPUs to China and Hong Ko...

  2. Source: cnas.org
    Link: https://www.cnas.org/publications/commentary/chinese-firms-are-evading-chip-controls
    Source snippet

    Chinese Firms Are Evading Chip ControlsThe chip-specific controls attempted to ban Chinese entities from procuring advanced AI chips base...

  3. Source: iaps.ai
    Link: https://www.iaps.ai/research/tag/Compute%2Bgovernance
    Source snippet

    Compute governance — ResearchAdding location verification features to AI chips could unlock new governance mechanisms for regulators, hel...

  4. Source: rebuilding.tech
    Link: https://www.rebuilding.tech/posts/conditional-export-controls-on-ai-chips
    Source snippet

    Techno-Industrial Policy PlaybookConditional Export Controls on AI ChipsThis approach allows BIS to specify the conditions under which ex...

  5. Source: astutegroup.com
    Link: https://www.astutegroup.com/news/general/headline-us-crackdown-on-nvidia-chip-smuggling-tightens-supply-scrutiny-as-china-localisation-accelerates/
    Source snippet

    US crackdown on Nvidia chip smuggling tightens supply...US prosecutors have charged technology executives with illegally shipping advanc...

  6. Source: eenewseurope.com
    Title: ee News Europe AI chip export controls: House targets cloud GPU rentals
    Link: https://www.eenewseurope.com/en/ai-chip-export-controls-cloud-remote-access-security-act/
    Source snippet

    13 Jan 2026 — The US House of Representatives has passed a bipartisan bill intended to close what lawmakers see as a “cloud loophole” in...

  7. Source: kharon.com
    Title: managing export controls compliance across advanced technology sectors
    Link: https://www.kharon.com/resources/article/export-controls/managing-export-controls-compliance-across-advanced-technology-sectors
    Source snippet

    AI & Semiconductor Export Controls Compliance12 Feb 2026 — Stay ahead of fast-changing AI and semiconductor export controls. Learn how Kh...

  8. Source: laweconcenter.org
    Title: us export controls on ai and semiconductors two divergent visions
    Link: https://laweconcenter.org/resources/us-export-controls-on-ai-and-semiconductors-two-divergent-visions/
    Source snippet

    US Export Controls on AI and Semiconductors24 Mar 2025 — The United States currently stands at a critical strategic crossroads regarding...

  9. Source: economist.com
    Title: a new case of chip smuggling shows the limits of export controls
    Link: https://www.economist.com/business/2026/03/26/a-new-case-of-chip-smuggling-shows-the-limits-of-export-controls
    Source snippet

    A new case of chip smuggling shows the limits of export...26 Mar 2026 — Federal prosecutors charged Supermicro's co-founder with smuggli...

  10. Source: mofo.com
    Title: 260209 managing export control risks in the ai chip ecosystem
    Link: https://www.mofo.com/resources/insights/260209-managing-export-control-risks-in-the-ai-chip-ecosystem
    Source snippet

    Managing Export Control Risks in the AI Chip Ecosystem9 Feb 2026 — This article summarizes recent policy developments and key enforcement...

Topic Tree

Follow this branch

Parent topic

Chip Controls Can AI Chip Controls Slow Dangerous Capabilities?

Related pages 2