Taiwan’s prosecution of nine people over alleged AI-server exports to China has exposed a blunt vulnerability in the technology blockade: the controls may be strict, but the paperwork can still be bent.

Taiwanese prosecutors announced Monday that the suspects included one Nvidia employee and two Super Micro employees, alleging illegal exports of “high-end AI servers” to mainland China. The charges arrived as Washington and Taipei intensify efforts to stop China from acquiring computing power useful for advanced AI development.¹

The case follows a wider U.S. crackdown that began in 2022, when Washington required licences for semiconductor exports to China. Taiwanese investigators were prompted to examine a related alleged network after U.S. authorities arrested Supermicro co-founder Wally Liaw in March over claims that restricted AI servers had been routed to China.

Investigators say the alleged scheme relied on forged records. Documents were purportedly created to show that 130 B300 servers had been installed at a Taiwanese site. In reality, 74 were allegedly exported to Chinese customers, while customs officials stopped another 56 intended for China after detecting irregularities.²

That gap between formal controls and practical enforcement is the central problem. Prosecutors allege the defendants were fully aware of Nvidia’s and Supermicro’s export-control procedures, yet colluded for “enormous profit,” raising compliance costs and damaging Taiwan’s international standing.²

Supermicro, which says it is not a target of the investigation, has said it is cooperating with Taiwanese authorities and has previously described the episode as a reminder of the need for stronger safeguards and supply-chain visibility. Nvidia and Supermicro did not immediately comment to Ars Technica on the latest indictments.²

The allegations do not prove corporate leadership directed the activity; a third-party review reportedly cleared Supermicro’s current senior officials. But they sharpen the uncomfortable lesson for U.S. policymakers: export rules can be expanded to cover chips, servers and even remote cloud access, yet enforcement can still fail when intermediaries, internal actors and false documents obscure where the machines finally land.