The U.S. agency that polices semiconductor export controls has quietly opened a front it has never seriously fought on before: the perfectly legal business of renting out computing power. According to a Bloomberg report published Aug. 7, the enforcement arm of the Commerce Department's Bureau of Industry and Security (BIS) is now systematically reviewing how Chinese artificial intelligence firms reach Nvidia's most advanced chips overseas, not by smuggling them across a border, but by renting time on them in data centers in third countries.
The shift matters because remote access, at present, is not illegal. For years Washington has built an ever-taller fence around Nvidia's top processors, barring their sale to China. A Chinese company that ships its training data to a server farm in Malaysia, runs a model on Nvidia chips housed there, and receives the finished model weights back never triggers a traditional export event, because the chips themselves never move. BIS said as much itself in advisory opinions issued in 2009, 2011 and 2014: cloud providers are not "exporters" under U.S. rules. The review now underway asks whether that technical compliance still holds up as a legal defense.
The breakthrough that forced the issue
The trigger was a run of strong Chinese models. Last month Moonshot AI released Kimi K3, a 2.8-trillion-parameter system that scored nearly as high on benchmarks as the latest models from Anthropic and OpenAI and, according to Tech Times, wiped out roughly $3.3 trillion in semiconductor market value during its release week. A Bloomberg investigation found Moonshot built it using a computing agreement with investor Alibaba for some 20,000 Hopper-generation Nvidia chips. A top White House official then publicly accused Moonshot of illegally obtaining Nvidia hardware and reaching those chips remotely through an unnamed party in Thailand, a post Bloomberg reported was not coordinated with Commerce. Days later, the BIS enforcement team launched its review.
The review reportedly builds two lists. One names countries running black markets that physically move restricted chips into China, squarely within enforcement's remit. The other, more unusual list names countries where Chinese firms simply tap the chips remotely. Southeast Asia features heavily. Alibaba, for instance, reaches Nvidia chips in Malaysia through Megaspeed International, a Singapore-registered firm under U.S. and Singaporean investigation for possible chip diversion; the two do not deal directly, but route the arrangement through a Singaporean shell controlled by a Cayman Islands entity Alibaba ultimately owns, according to documents Bloomberg reviewed. Megaspeed imported an estimated $4.6 billion in Nvidia hardware, roughly 136,000 GPUs, between 2023 and late 2025, yet when Nvidia visited its data centers it found only a few thousand chips on-site. Similar rental deals have surfaced elsewhere: Tencent secured access to about 15,000 Blackwell processors through Japan's Datasection in contracts worth roughly $1.2 billion, and Shanghai startup INF Tech tapped some 2,300 Blackwell GPUs via an Indonesian telecom operator.
The cloud loophole
Analysts argue this channel has become the single biggest hole in the export-control regime. The Institute for AI Policy and Strategy estimates that offshore compute-rental arrangements could be boosting China's effective access to advanced U.S. compute by at least 60 percent in 2026, relative to what chip export controls alone would permit.
Closing the gap is harder than it sounds. BIS built its authority around the movement of physical goods, and its own decade-old advisory opinions bind it under administrative law, meaning the agency likely cannot simply reverse course through enforcement without inviting an immediate legal challenge. That is why attention has turned to Congress. The Remote Access Security Act, which passed the House 369-22 on Jan. 12, would amend the Export Control Reform Act to add "remote access" as a category BIS can license and regulate. "Under current law, bad actors can train AI models by accessing advanced chips under the jurisdiction of the US, and the Bureau of Industry and Security has no authority to require a license," Sen. Dave McCormick, who introduced the Senate companion with Sen. Ron Wyden, said in a statement. "This legislation closes this existing security gap by extending export controls to include remote access scenarios." The Senate version has not yet received a vote.
Industry will fight any clampdown. Nvidia has blamed export controls for forcing it to "forfeit the world's second-largest commercial market to foreign competitors," warning that "America cannot afford to lose all of Asia next." Chinese cloud demand is a major driver of Southeast Asia's data-center boom, and the revenue is substantial.
Washington's own posture remains contradictory. In January, BIS shifted its H200 review policy to case-by-case approval with a 25 percent tariff, yet Under Secretary Jeffrey Kessler told lawmakers in July that actual deliveries remained "trivial." A May 31 guidance closed an offshore-subsidiary ownership loophole but let existing arrangements keep running.
What to watch next
The near-term signal is whether BIS moves from review to rulemaking, or refers cases under statutes that do not hinge on the word "export." Watch the Senate's handling of the Remote Access Security Act, possibly as an amendment to the fiscal 2027 defense authorization bill; the outcome of the Megaspeed probe in Singapore and the U.S.; and whether Nvidia's compliance whitelist cuts push Chinese demand toward jurisdictions still beyond Washington's reach.
"Under current law, bad actors can train AI models by accessing advanced chips under the jurisdiction of the US, and the Bureau of Industry and Security has no authority to require a license."- Sen. Dave McCormick, Republican of Pennsylvania