bloomberg.com web signal

BIS probes Chinese firms' offshore access to Nvidia chips

TL;DR

  • The BIS enforcement arm has opened a systematic review of how Chinese AI firms access Nvidia chips overseas, focused on legal remote cloud rentals.
  • The trigger is Moonshot's Kimi K3, a 2.8-trillion-parameter model, with the White House alleging GB300 access via Thailand and about 20,000 H200s via Alibaba.
  • BIS is drafting two country lists, one for physical smuggling routes and one for remote-access hubs, while reportedly having shelved its own draft cloud rules.

Bloomberg reports that the enforcement arm of the Bureau of Industry and Security has opened a systematic review of how Chinese AI firms access Nvidia chips overseas, and the second half of that review is where the story turns. The division is compiling two lists. One names countries where restricted Nvidia hardware is being physically smuggled into China. The other names countries where Chinese firms simply rent the compute remotely, an activity that is not, at present, illegal.

That second list is the awkward one, and it explains why the review exists at all. The trigger was Moonshot's release of Kimi K3, a 2.8-trillion-parameter model reportedly rivaling the best systems from OpenAI and Anthropic. On July 22, Michael Kratsios, director of the White House Office of Science and Technology Policy, accused Moonshot of acquiring GB300-equipped servers and running workloads on GB300s in Thailand. Separate reporting puts roughly 20,000 Nvidia H200 accelerators in Moonshot's hands via a compute agreement with Alibaba, which is also one of the startup's largest investors.

The substantive problem for Washington is that its own toolkit was built for cargo, not cloud. As The Next Web put it, BIS built its powers around the movement of physical goods, so it is unclear whether it can police cloud-computing deals at all. BIS has reportedly shelved its own draft rules on this front, which makes the current move look less like enforcement and more like a mapping exercise, naming Thailand, Malaysia, Singapore and other jurisdictions where the compute is actually landing.

The honest caveat is that most of the sharpest specifics here, from the GB300 servers to the Thailand pipeline, trace back to one White House official's public statements and single-sourced reporting rather than to a filed charging document. Treasury Secretary Bessent has said sanctions and Entity List designations 'will be on the table', but that is a threat, not an action yet. Take the specifics as reported, not as adjudicated.

What the reporting doesn't give you is the deeper legal question underneath: whether Commerce can actually extend export-control jurisdiction over foreign data centers renting compute to foreign customers, and how allied governments in Southeast Asia will react if it tries. The forward read is that Nvidia's non-China cloud customers, and any US hyperscaler with a Chinese enterprise book in the region, should assume tenant-diligence questions are coming this quarter, whether or not the rules themselves change.

Shared on Bluesky by 1 AI expert