What the AI Chip Diversion Reports Teach Us About Thin Counterparties and Insider Approaches

Hello, this is Ryuta Hamamoto from TIMEWELL.

Early in November 2026, reports about AI chip diversion came one after another. One was about a Singapore-based AI infrastructure company suspected of routing Nvidia chips to customers in China. The other was about suspicions that a Chinese intelligence service was involved with a person described as one of that company's executives. Both contain points that export control practitioners cannot treat as someone else's problem.

A caution first. This article is not written to condemn any company or individual. Most of what has been reported is under investigation or at the allegation stage, and the company denies it. As for Nvidia, I found no official finding that the company itself violated export controls. The premise here is that a manufacturer, a trading company, and a buyer can all face the same structure. I will separate what is confirmed from what is reported, then ask what we can take back to our own work.

If you would like to see where your counterparty screening stands first, the 3-minute export control check helps you map each point below to your own process.

What is confirmed, what is reported, and what is not known

Topics like this tend to blur fact and suspicion, so I will sort them into three groups.

Category	Content
Confirmed	The company was founded in 2015, acquired in March 2023 by a British Virgin Islands entity that renamed it, then acquired in October 2023 by a Singapore company. Public filings show total assets rising from $75 in 2022 to $33 million in 2023 and about $3 billion in 2024, and revenue from zero in 2023 to $294 million in 2024.12 Singapore police have been investigating the company since October 2025 over suspected breaches of domestic law.3 The company denies any illegal transfer.1
Reported or alleged	US Commerce and Justice Department inquiries (anonymous sources). Data centers in Malaysia and Indonesia that appeared to serve Chinese customers remotely (US press report). Use of a network of affiliates to obtain chips barred from export to China (US officials, as reported). A person described as an executive having ties to Chinese intelligence (anonymous sources).124
Not established	Any indictment or administrative penalty. Evidence that chips were actually used in China. The reaction of the person described as the executive. Details such as whether the lights were on at the office or what phone number was answered; no report I read mentions them.

A few notes. In October 2025 a local reporter visited the registered headquarters and found the door locked and nobody there, and a US newspaper reporter reportedly found two people on a weekday.¹ That has innocent explanations, such as travel or remote work, and proves nothing alone. There is also a report that the Australian subsidiary sits in a shared space that rents from $17 a day.¹

The company's side matters too. In a December 2025 statement it said it operates within applicable export controls and that repeated on-site checks by BIS, the Malaysian government, and Nvidia found no evidence of violations. On November 12, 2026, it said it would engage a major US law firm to verify its compliance independently.¹² Nvidia said in October 2025 that it had visited several of the company's sites, found a small commercial cloud operating within what US export controls allow, and saw no reason to believe products were diverted.³ Malaysia's trade minister reportedly said no evidence of a breach of domestic law had been presented and no investigation had been opened.²

The second thread, suspicions about intelligence services, needs even more care. A US newspaper reported, citing anonymous people briefed on it, that a classified US government memo said a person described as an executive of the company had been recruited by China's Ministry of State Security. Another report said intelligence officials in the United States, Singapore, and Taiwan had reason to suspect that person. China's foreign ministry called it "completely groundless" on November 9.⁵⁶ Nvidia's board announced an independent inquiry on November 8, saying it had no reason to believe national security or Nvidia's secrets were compromised, and that it would examine whether its CEO had been the target of a foreign intelligence effort. The CEO was reported to have resigned on November 12.⁵⁶ The personal side of this is not my subject, and I leave it aside.

How diversion is carried out

Borrowing the structure from the reports, I will sketch three general forms of diversion. This is not a reconstruction of the suspicions; it describes patterns that can arise in practice.

The first is to make a third-country company the buyer. When goods cannot go directly to a tightly controlled destination, a company in a looser jurisdiction or a transit hub becomes the purchaser. As I wrote in the article on the Taiwan indictment reports and the guide to circumvention red flags, passing through a third country is not illegal in itself. The problem is hiding the final destination or user, or making documents and reality diverge.

The second is to place equipment in an overseas data center and offer only access to it, remotely. This was the central issue in the reporting. The chips might ship to Malaysia or Indonesia while the customers using them sit in another country. Because the hardware never crosses a border, this looks like a gray area in practice. In its January 2026 rule, BIS made it a condition of case-by-case review for chips such as the H200 going to China that the final consignee run know-your-customer procedures to prevent remote access by unauthorized parties.⁷ Its May guidance confirmed that a license is required for entities headquartered in D:5 countries or Macau even when those entities sit elsewhere.⁸ Rules and practice for cloud and compute rental are still being worked out. I touch on this in the article on reports of chip purchases by Chinese universities as well.

The third is to spread purchases across thin affiliates. One company buying in bulk stands out, so the buying is split among several entities. The reports include a US official's account of a network of affiliates used to obtain large quantities of chips, but that remains an allegation. What makes this form hard is that each transaction is small and looks ordinary. You have to judge whether a counterparty is a real business by looking at the whole relationship, not one deal at a time.

How to spot a thin counterparty

There is no single test for a shell company. The November 2023 FinCEN and BIS joint notice itself says no single sign necessarily indicates illicit activity, and asks for judgment on the surrounding circumstances.⁹ I will restate its signs in working terms.

Little web presence or domain-based email. A refusal, or failure, to explain end users, end use, or ownership when asked. A phone country code that does not match the destination country. A consignee that looks like a mail center, trading company, or logistics firm. An item that does not fit the purchaser's line of business. Paying well above market price. A last-minute change in payment routing. These are the representative signs in the notice.⁹

Now I will lay the reports' points over them. The first is the fit between company age and transaction size. Total assets going from $75 to about $3 billion in two years certainly catches the eye. But many legitimate operators are growing fast while demand for AI infrastructure surges. Rapid growth is one sign, and it means something only next to others: headcount, the contents of the financial statements, where the money comes from, what the office is really like, and the spread of customers.

The second is the relationship between registered address and actual premises. A registered office that is locked, or a shared space, is not meaningful alone. But when the transaction is large and the only evidence of substance is a registration and paperwork, that is a reason to deepen checks. Where possible, visit or verify the site by video, in proportion to the size of the deal.

The third is corporate history and ownership. A company with acquisitions and a name change after incorporation, or with holdings passing through several entities, takes work to trace to its ultimate owner. The steps in the basics of beneficial ownership checks and end-user screening and customer due diligence apply as they are.

The fourth is consistency between the contract and reality. Check whether the data center location, where the equipment is installed, the country of the users, and the country of the payer match what the contract says. However many sites a supplier visits, who uses the machines remotely is hard to see. That is a difficulty Nvidia faces in these reports, and our own customer due diligence has the same one.

Preparing for approaches through people

The part of the reporting I want to handle most carefully is the approach by intelligence services. The suspicions about the person described as an executive are not established. Even so, approaches through people remain a real risk for anyone in export control or economic security.

Japan's National Police Agency divides technology leakage into three patterns: cyberattacks, espionage, and leakage through economic and academic activity. As entry points for espionage it lists messages on personal social media from foreign companies you have no contact with, and gifts or meals offered "as thanks" by people at foreign firms you already deal with, describing both as possible signs of someone approaching you. Its three recommended steps are to look closely at the other party, stop and think, and share and consult.¹⁰ Japan's Public Security Intelligence Agency also runs a consultation desk, on its economic security page, for matters including suspicious approaches.¹¹

Here I bring in the MICE framework. MICE groups the motives that lead people to supply information: Money, Ideology, Coercion or Compromise, and Ego. I wrote about its limits and uses in the article on MICE. The short version is that MICE is a tool for designing an organization's safeguards, not for suspecting people. Signs prove nothing, and motive alone cannot predict who will act.

Trade shows, international conferences, hospitality, and site visits are settings where distance between strangers closes quickly. Add thank-you gifts, special favors, or personal kindness, and ego or money can become an entry point. However, I did not find public statistics showing how often approaches in MICE settings, in the sense of meetings, incentives, conventions, and exhibitions, actually occur. What follows rests on the signs the police agency describes and my own view of organizational design.

As systems that do not depend on individual vigilance, I suggest the following. Record and share outside meals and gifts regardless of value. Provide a channel where anyone, whatever their rank, can disclose private interests or close relationships with counterparties. Do not let important decisions rest with a single employee or a single executive. Name a place to ask when someone contacts a staff member personally, outside the company, with a request. And apply all of this to the leadership at the same level as everyone else. The fact that Nvidia's board entrusted an independent inquiry to outside counsel is a useful reference point on governance.

What posture to take

Here is the screening flow in outline. It does not stop every deal; it varies the depth of checking by case.

First, verify the buyer's substance in proportion to the size of the deal. Next, obtain the end user and the installation site in writing. For deals that include renting compute, state in the contract who will use it and where they connect from, and build in user screening and the ability to cut off remote access. Record what you confirmed and why you decided as you did. If something looks off mid-deal, do not decide alone; escalate to your export control officer and legal team and hold the shipment or contract decision. For problems found, the EAR has a voluntary self-disclosure procedure (15 CFR 764.5).⁸

It also helps to settle in advance what to do when a counterparty is named in the news. Record the date and content of the report, then check the scope of your own dealings, the end user, the installation site, and the payment flow. If the report is at the allegation stage, assess the facts and the risk, decide whether to continue or hold the shipment or contract, and keep the reasons. The answer is neither "stop because it is in the news" nor "continue because they deny it." Decide on your own facts.

Finally, preparation for people. Share the signs of an approach and how to use the consultation desks in regular training, and make the National Police Agency and Public Security Intelligence Agency contacts known inside the company. Economic security is not the job of a few specialists. It concerns everyone who has contact with outsiders: sales, purchasing, research, assistants, and executives.

What makes all of this hard is that each sign is small and looks ordinary. Collecting the company's history, ownership, premises, deal size, payment flows, and news coverage case by case, judging them against one standard, and recording the reasons is work that leans on individual experience.

TRAFEED, our export control AI agent, brings reflection of rules across jurisdictions, counterparty screening, and decision records into one flow. The aim is to keep the signs found during counterparty checks, your assessment of them, and the reasons for your decision on file so a colleague can review them later. The final determination remains with your export control officer. TRAFEED supplies the material for that judgment.

What to take from this

Investigations continue, there are denials, and much remains unestablished. Still, I see four points a practitioner can take away.

• Keep fact, report-stage claims, and the unknown apart. Do not treat allegations as established facts.
• No single sign of a thin counterparty proves anything. Read corporate history, scale, premises, ownership, and payments together.
• Offering only remote access without moving the equipment is an area where rules and practice are still settling. Put user and connection-source checks in the contract.
• Prepare for approaches through people with records, sharing, consultation, and more than one pair of eyes, not individual vigilance. Apply the same standard to leadership.

I think it is more useful to read this as a chance to check where our own screening and systems have gaps than as a story about who is to blame. Manufacturers, distributors, and buyers all sit inside the same difficulty. If you want to review your counterparty screening or your safeguards against approaches through people, please contact us about TRAFEED. We will listen first and work through it together.

References

Reports cited run through November 13, 2026. Many rest on anonymous sources and are not established facts. Figures and claims follow each outlet's own wording. Public awareness materials and US regulatory information were checked against each agency's official sources.

Footnotes

1. CBS News, "Megaspeed's vacant offices raise questions about ties to Nvidia and China", November 2026. https://www.cbsnews.com/news/megaspeed-nvidia-china-ties/ ↩ ↩² ↩³ ↩⁴ ↩⁵ ↩⁶

2. CNBC, "What we know so far about Nvidia partner Megaspeed's Asia footprint", November 2026. https://www.cnbc.com/2026/11/12/nvidia-megaspeed-alice-huang-jensen-.html ↩ ↩² ↩³ ↩⁴

3. CNBC, "Singapore, U.S. investigate Nvidia client Megaspeed", October 10, 2025. https://www.cnbc.com/2025/10/10/singapore-us-investigate-nvidia-client-megaspeed-export-controls-violation.html ↩ ↩²

4. CNBC, "What is Megaspeed? The Nvidia chip buyer in the spotlight", November 9, 2026. https://www.cnbc.com/2026/11/09/megaspeed-nvidia-jensen-huang-alice-huang.html ↩

5. CNBC, "Nvidia CEO Jensen Huang faces bipartisan congressional scrutiny over reported China spy link", November 8, 2026. https://www.cnbc.com/2026/11/08/jensen-huang-nvidia-china-spy-congress.html ↩ ↩²

6. ABC News, "Timeline of the stunning fall of powerful Nvidia CEO Jensen Huang", November 12, 2026. https://abcnews.com/Business/timeline-stunning-fall-powerful-nvidia-ceo-jensen-huang/story?id=138041659 ↩ ↩²

7. Federal Register, "Revision to License Review Policy for Advanced Computing Commodities", 91 FR 1684, effective January 15, 2026 (FR Doc. 2026-00789). https://www.federalregister.gov/d/2026-00789 ↩

8. BIS, "Guidance Regarding Enforcement of License Requirements for Advanced Computing Items for Entities Headquartered in Country Group D:5 and Macau", May 31, 2026. https://www.bis.gov/media/documents/bis-guidance-may-31-2026.pdf ↩ ↩²

9. FinCEN and BIS, "FinCEN and the U.S. Department of Commerce's Bureau of Industry and Security Announce New Reporting Key Term and Highlight Red Flags Relating to Global Evasion of U.S. Export Controls", FIN-2023-NTC2, November 6, 2023. https://www.fincen.gov/system/files/shared/FinCEN_Joint_Notice_US_Export_Controls_FINAL508.pdf ↩ ↩²

10. National Police Agency of Japan, "Preventing Technology Leakage" (Japanese). https://www.npa.go.jp/bureau/security/economic-security/index.html ↩

11. Public Security Intelligence Agency of Japan, economic security special page (Japanese). https://www.moj.go.jp/psia/keizaianpo.top.html ↩