Five Point Six Billion Through a Name Change: How a Blacklisted Chinese Server Giant Kept Buying Blackwell, September 8, 2026

0:00Welcome to the DX Today podcast. Your daily deep dive into the AI ecosystem. I'm Chris, and joining me is always Laura. Thank you, Chris. And I have to warn you, today's story sounds like dry trade paperwork for about 10 seconds. And then becomes one of the more astonishing things I have read all year. That is a promising opening. So give me the shape of it before we get into the details. Because export control stories tend to lose people fast if you lead with the filings. Here's the shape of it. A Chinese server company was blacklisted by the United States government. It quietly changed the name of its American subsidiary, and that subsidiary kept buying America's most advanced AI chips anyway. That is not boring at all. That is the corporate equivalent of putting on a fake mustache and strolling back through the same door you were escorted out of. And apparently nobody at the door blinked. The fake mustache comparison is closer to the literal truth than it has any right to be. The New York Times published this investigation on Sunday, built on trade records analyzed through a service called import genius.

1:03Let's establish the baseline before the plot twists. Who is the parent company here? And what are the United States government actually accused them of that got them cut off in the first place? The parent is in Spore Group, one of the largest server manufacturers on the planet. In March of 2023, the Commerce Department added inspir to the entity list over a legit procurement of American components supporting Chinese military modernization. For anyone who has not spent time in this corner of policy, I think there is a common misconception that the entity list is simply a ban. Explain what it actually does in practice. It is a licensing requirement rather than a flat prohibition. An American supplier needs a specific government license to sell to a listed company, and those licenses are frequently denied by default. More than 3,000 companies worldwide now sit under those restrictions. So the door is not welded shut. It just requires a key that the government hands out very reluctantly and mostly does not hand out at all. And 3,000 companies tells me this is a routine instrument,

2:04not a rare punishment. Exactly right, which is why what happened next matters so much. In the August 2023 interim report, the California unit that had been called inspir systems appears instead as AVE systems. Same offices, same workforce, entirely new label. I want to sit with that for a moment because on its face, a rebrand seems far too simple to work. Are you telling me a new name on the letterhead was genuinely sufficient to keep the chips flowing? Not the name alone, and this is where it becomes structurally clever, rather than merely cheeky. The reporting indicates inspir holds roughly 33% of AVE, which sits below the 50% ownership threshold that would trigger automatic sanctions. So the ownership stake was engineered to land underneath a bright line rule. That is not a loophole. Somebody stumbled into by accident. That is a loophole. Somebody measured with a ruler before construction began. That is the fair reading, and the paper trail keeps thinning as you follow it forward. By the April 2024 annual report, AVE and the entire American operation

3:06are no longer mentioned anywhere in the disclosures. The disclosure vanishes right as the volume presumably picks up. Give me the actual numbers, because I suspect this is the point where the story stops being clever and starts being genuinely enormous. Between April of 2024 and February of 2026, AVE exported at least $5.6 billion of advanced technology to Southeast Asia. More than $3 billion of that was computers built around Nvidia Blackwell chips. Walk me through that quarter slowly, because I want to understand where anybody in the chain at any single step would have been in a position to say no with real confidence. Step one, AVE purchases Nvidia hardware as a domestic American company, which it legally is. Step two, the equipment ships to a Malaysian intermediary. Step three, it moves onward to a Chinese firm called McGinfra. Several transactions removed from the original American sale. In each individual step looks defensible and isolation, while the sum of the steps clearly is not.

4:06By the third hand off, the original seller can honestly say they had no visibility into where those boxes finally landed. That is precisely the design and the receiving volumes are substantial. McGinfra reportedly imported more than $700 million of servers from Malaysia in a single six-month window, which works out to over 1,500 individual units. 1,500 servers is a meaningful cluster. That is not somebody buying a workstation for a graduate research project. That is the raw material for training models at genuine frontier scale. And the reported end users are names you know very well. Both bite dance and alibaba turn up as ultimate recipients of hardware that traveled this Southeast Asian route, rather than being purchased directly from an American supplier. Let me play devil's advocate because I think the story earns it. Is there a defensible reading where this is simply ordinary international commerce? And the outrage we are building here is somewhat misplaced? There is a version of that argument and it rests on two real facts. No charge has been filed against anyone and Aves itself was never named on the entity list.

5:09Legality and intent are genuinely separate questions in this case. That distinction matters more than people usually allow. A rule can be followed to the letter and defeated in spirit simultaneously. And our legal system generally cares about the letter unless a prosecutor proves something more. Washington has clearly noticed the gap though because the regulatory response has been a steady sequence of patches. In March of 2025, six insprous subsidiaries were added to the entity list and Aver was somehow not among them. That omission is remarkable, given everything you have described. Six related entities get named while the one moving billions of dollars of black while hardware through Malaysia does not make the list at all. Then in September of 2025, commerce launched what it calls the 50% affiliates role, extending restrictions to companies majority owned by listed entities. 33% ownership sits comfortably and deliberately underneath that line. So the patch was written to catch majority ownership and the structure was already tuned to stay in the minority.

6:10The rule arrived aimed squarely at a target that had already stepped politely to one side. In May of 2026, commerce went further and issued guidance requiring licenses for sales to companies whose ultimate parents sits in an embargoed country, which is a substantially harder standard to engineer your way around. But by then, roughly 22 months of these exports had already happened. And guidance issued in May does not retroactively undo completed shipments. I want to turn to the second loophole you hinted at earlier because my understanding is that the hardware route is only half of this problem. And the other half might actually be the larger one. The other half is remote access and I would argue it is far more durable. A Chinese firm does not need to own a chip at all if it can simply lease time on one sitting in a Southeast Asian data center, which means the entire physical export control apparatus, all the customs forms and shipping manifests and end user certificates, becomes close to decorative the moment that same compute is reachable over an ordinary internet connection. Senator Dave McCormick put it plainly saying that under current law,

7:10bad actors can train AI models by accessing advanced chips under American jurisdiction. And the Bureau of Industry and Security has no authority to require license. When you get that kind of a bipartisan alignment on a technology question, something usually moves. What is actually working its way through Congress right now and how close is any of it to becoming law? There are two vehicles in motion. The Remote Access Security Act passed the House in January of 2026 by a vote of 369 to 22. And it now awaits Senate action. The Chip Security Act cleared House Foreign Affairs in March and still needs both full chambers. So the diagnosis is bipartisan. The prescription is written and the pharmacy has not opened. Meanwhile, the physical shipments and the least compute both continue operating under the older and looser set of rules. That is a fair summary. And Vidya's position throughout has been consistent, incidentally. A spokesman named John Rizzo said the company does not support product diversion and sells only to well-known partners who work with Vidya to ensure compliance.

8:12I actually find that a defensible posture in principle. A chipmaker selling to a domestically incorporated American buyer is not obviously the party best positioned to trace a shipping container through three separate countries and two intermediaries. I would push back on that slightly when a single customer moves billions of dollars of your most restricted product into one region. The volume itself is a signal and noticing volume signals is precisely what compliance teams exist to do. That is a fair challenge. And it points directly at the real structural question. Should the obligation sit with the seller, with the government, or with the intermediaries, who somehow almost never face any consequence whatsoever? Markets have begun forming their own opinion, incidentally, shares of Inspir Electronic Information Industry fell 3.8% on Monday, closing at 74.74 UN, and notably, neither in Vidya, Inspir, Aver, nor McGinnfra had publicly addressed the findings as of publication, and the Commerce Department announced no new enforcement action.

9:15The timing is what really gets my attention, though, because this is not landing during a quiet diplomatic week. There is a calendar problem sitting underneath this whole story, isn't there? There absolutely is. A United States and China Artificial Intelligence Dialogue is expected in the middle of this month, with Treasury Secretary Scott Besant leading the American delegation into what would be the first official talks of their kind in this administration. And what is actually on that agenda? Because an AI dialogue between these two particular governments could mean anything from technical cooperation to an extremely polite exchange of mutual accusations across a very long table. The reported agenda includes monitoring AI-directed cyber attacks, sharing threat intelligence, and addressing intellectual property concerns. Then Xi Jinping is expected at the White House on the 24th, timed around the United Nations General Assembly. So a story about billions of dollars of restricted chips reaching Chinese firms arrives roughly two weeks before the highest level meeting, on precisely this subject that is terrible timing for one side

10:17and very useful leverage for somebody. And the central question hanging over those meetings is whether Washington will keep tolerating Southeast Asian data centers, offering Chinese firms cloud access to Nvidia hardware, which is the one loophole nobody has closed yet. Let me zoom all the way out because I want to ask the genuinely uncomfortable question. Do export controls on compute actually work? Or are we watching an elaborate demonstration that they fundamentally cannot? My honest read is that they work as friction rather than as a wall. They raise cost, add latency, and complicate procurement, but a determined buyer with capital and patience eventually finds a path. And this story is the proof of that. Friction has real value though. If a rival lab spends 18 months in enormous sums assembling compute that an American lab simply orders from a catalog, that gap compounds across multiple model generations rather than resetting each time. I agree. And that is the strongest argument for keeping the regime in place. But friction only compounds if you patch the holes faster than clever lawyers can find new ones.

11:18And right now the patching is measurably slower. The other backdrop is that Chinese models have been closing the performance gap regardless. Systems coming out of Chinese labs have become genuinely competitive over the past year and a half by most public benchmarks, which sharpens the policy dilemma considerably. If the gap narrows anyway, you have to honestly ask whether these controls bought meaningful time or mostly redirected supply chains through Malaysia while accomplishing rather less than their designers intended. So what should our listeners actually watch for over the next few weeks? Because this feels like a story with several possible next chapters rather than anything resembling a settled conclusion. Watch three things. Whether avers itself finally gets added to the entity list, whether the Senate moves the Remote Access Security Act, and whether the Cloud Access questions surfaces publicly in the meetings later this month. I would add a fourth. Watch whether anything at all happens to the intermediaries. Because as long as the middle of the chain faces no consequence, the incentive structure that produced this entire story remains completely intact.

12:20That is the right addition. And it is also the piece I would bet gets ignored. Enforcement attention tends to land on the recognizable names while the forwarding companies quietly reorganize under new ones and carry on. Which brings us right back to where we started, with a name change that turned out to be worth billions of dollars. Sometimes the most consequential thing in a corporate filing is a single word on a single line. And that is genuinely the lesson here. The most sophisticated evasion of the most sophisticated technology controls in the world came down to corporate structure, ownership percentages, and paperwork rather than anything remotely technical. That's all for today's episode of the DX Today Podcast. Thanks for listening, and we'll see you next time.