Chinese AI Firms Evade US Chip Ban by Training Models Abroad with Smuggled Data

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Chinese AI engineers are circumventing US export controls by physically transporting large hard drives containing training data to Malaysia, where they rent servers equipped with advanced NVIDIA chips to train AI models. This workaround enables continued AI development despite restrictions on high-end chip exports to China.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves AI systems (training AI models using advanced chips) and the use of AI hardware and data transfer strategies to evade export controls. The article focuses on the development and use of AI systems in a way that could plausibly lead to significant harms, such as undermining national security or enabling restricted AI capabilities. However, no direct or indirect harm has materialized or been reported. Thus, it fits the definition of an AI Hazard, as it plausibly could lead to an AI Incident in the future if these activities result in harmful AI applications or breaches of legal frameworks.[AI generated]
AI principles
AccountabilityTransparency & explainabilityPrivacy & data governanceRobustness & digital securitySafetyRespect of human rights

Industries
IT infrastructure and hostingDigital securityReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estateReal estate

Affected stakeholders
Government

Harm types
Public interestHuman or fundamental rightsEconomic/Property

Severity
AI hazard

Business function:
Research and development

AI system task:
Content generationReasoning with knowledge structures/planning


Articles about this incident or hazard

Thumbnail Image

Suitcases of drives, rented servers abroad: How China's AI firms are evading US chip crackdown

2025-06-16
MoneyControl
Why's our monitor labelling this an incident or hazard?
The event involves AI systems (training AI models using advanced chips) and the use of AI hardware and data transfer strategies to evade export controls. The article focuses on the development and use of AI systems in a way that could plausibly lead to significant harms, such as undermining national security or enabling restricted AI capabilities. However, no direct or indirect harm has materialized or been reported. Thus, it fits the definition of an AI Hazard, as it plausibly could lead to an AI Incident in the future if these activities result in harmful AI applications or breaches of legal frameworks.
Thumbnail Image

Massive petabyte data transfers are replacing black market chips as China trains AI outside its borders

2025-06-16
TechRadar
Why's our monitor labelling this an incident or hazard?
The article explicitly involves AI systems (large language models) being trained using data physically transported to GPU-rich data centers offshore. The event stems from the use and development of AI systems under constrained legal frameworks (US export restrictions). Although no direct harm (such as injury or rights violations) is reported, the circumvention of export controls and the exploitation of enforcement gaps plausibly could lead to significant harms, including legal violations and geopolitical tensions. Hence, it fits the definition of an AI Hazard rather than an Incident or Complementary Information.
Thumbnail Image

Chinese Company Trains AI Model In Malaysia To Evade US Ban

2025-06-16
Lowyat.NET
Why's our monitor labelling this an incident or hazard?
The article explicitly involves AI systems through the training of AI models on advanced NVIDIA chips. The event concerns the development and use of AI systems in a manner that circumvents US export controls, which is a legal and regulatory issue. While no direct harm such as injury, rights violations, or disruption is reported, the circumvention of restrictions could plausibly lead to future harms, including unauthorized AI capabilities or geopolitical risks. Hence, it fits the definition of an AI Hazard rather than an Incident or Complementary Information.
Thumbnail Image

After Smuggling Chips, China's AI Engineers Now Sneak Hard Drives Into Malaysia to Train AI Models Using Rented NVIDIA High-End AI Chips

2025-06-14
Wccftech
Why's our monitor labelling this an incident or hazard?
The event involves the use and development of AI systems (AI model training on rented high-end AI chips) and describes a deliberate circumvention of US export controls through smuggling and renting AI hardware abroad. This constitutes a breach of legal obligations related to export controls, which falls under violations of applicable law protecting intellectual property and trade regulations. Although no physical harm or direct injury is reported, the illegal activity and violation of legal frameworks linked to AI system use meet the criteria for an AI Incident. The AI system's role is pivotal as the entire incident revolves around accessing AI hardware and training AI models despite restrictions.
Thumbnail Image

Chinese AI developers fly hard drives abroad to sidestep US chip curbs: WSJ report

2025-06-17
Economic Times
Why's our monitor labelling this an incident or hazard?
The event involves AI systems explicitly, as it concerns AI developers training AI models using advanced AI chips. The use of physical data transfer to bypass US export controls is a misuse of AI technology and a failure to comply with legal frameworks, which constitutes a breach of obligations under applicable law. Although no direct physical harm or injury is reported, the circumvention of export controls related to AI chip technology can be considered an indirect violation of legal obligations and a potential national security risk. Hence, this qualifies as an AI Incident due to indirect legal harm caused by the AI system's use and development.
Thumbnail Image

The Wild Ways China Smuggles NVIDIA Chips | AIM

2025-06-17
Analytics India Magazine
Why's our monitor labelling this an incident or hazard?
The article clearly involves AI systems as it discusses training AI models using NVIDIA chips. The illicit smuggling and use of these chips circumvent US government restrictions, which is a misuse of AI hardware. While no direct harm (such as injury, rights violations, or infrastructure disruption) is reported as having occurred, the circumvention of export controls and smuggling of AI hardware plausibly could lead to significant harms, including national security risks or escalation of AI capabilities in restricted regions. The article does not describe a realized AI Incident but rather a credible risk scenario. Hence, it fits the definition of an AI Hazard rather than an AI Incident or Complementary Information.
Thumbnail Image

Trump Must Protect American AI From China

2025-06-17
The Heritage Foundation
Why's our monitor labelling this an incident or hazard?
The article centers on the potential risks and strategic competition in AI technology between the U.S. and China, emphasizing the need for export controls to prevent adversaries from gaining advanced AI capabilities. While it discusses the plausible future harms related to AI proliferation and misuse, it does not describe an actual AI Incident or a specific AI Hazard event. Instead, it is a policy and strategic commentary on AI governance and national security. Therefore, it fits best as Complementary Information, providing context and insight into AI governance and geopolitical risks without reporting a direct incident or hazard.
Thumbnail Image

Ministry probing into alleged breach involving Nvidia's AI chips

2025-06-18
Malaysiakini.com
Why's our monitor labelling this an incident or hazard?
The article describes a government ministry probing a possible legal breach involving AI chips used for training large language models. While AI systems are involved, there is no evidence of realized harm or incident. The ministry's verification is a governance or legal compliance response, not an incident or hazard. Therefore, this is best classified as Complementary Information, as it provides context on regulatory oversight and potential legal issues without reporting an actual AI Incident or Hazard.