The DOJ Just Charged a Man With Smuggling $300 Million in Nvidia Servers. The Enforcement Model Is the Real Story.

The version that made the headlines

On October 1, the Justice Department announced the arrest of Greg Lui, 38, of San Gabriel, California, on a three-count federal indictment. Lui owns Earthmade Computer Inc., a City of Industry company that prosecutors say moved more than $300 million worth of export-controlled servers to China without the Commerce Department licenses those shipments required. The servers carried Nvidia's A100 and H100 GPUs. The three counts, conspiracy to violate the Export Control Reform Act and the Export Administration Regulations, outbound smuggling, and conspiracy to commit money laundering, carry a combined maximum of 50 years in prison.

It reads like a win, and in the narrow sense it is one. A man was arrested. A scheme was named.

The mechanics of that scheme are the part worth sitting with, because they tell you what this regime actually governs.

A purchase order for 27 servers, and a buyer named 'Jackie Lui'

According to the indictment, returned September 29, Lui and his co-conspirators bought controlled hardware from US manufacturers using documents that misrepresented where it was going. They shipped it to Malaysia and Singapore, neither of which requires a US license for the onward re-export, and moved it into China from there.

The specifics are almost mundane. In January 2024, Lui emailed a co-conspirator about a Malaysian transshipment company that wanted 70 servers with restricted GPUs. That same month he submitted a purchase order for 27 of them, about $7,614,000, shipped from Los Angeles to Kuala Lumpur. By March, a co-conspirator was emailing a Malaysian government official to confirm that all 27 had in fact gone to a China-based buyer.

A second shipment of 92 export-controlled servers was routed Singapore to Malaysia to Hong Kong and ended with a firm in Hangzhou. A third, 100 Malaysia-bound servers with H100 GPUs worth more than $22 million, arrived with documentation from a fabricated buyer whose listed CEO was "Jackie Lui." Prosecutors say Lui had bought the identifying documents of a real person years earlier and transacted under that identity to further the scheme.

Between January and October 2024, Earthmade took in more than $176 million from two Malaysia-based shippers, according to the indictment, with payment records pulled from accounts at Bank of America and JPMorgan helping build the case.

Then there is the detail that has become the defining image of this whole enforcement push. In a separate case unsealed in March, prosecutors released surveillance photos of workers in a Southeast Asian warehouse using a hair dryer to peel serial-number stickers off server packaging and reapply them to dummy units, so that staged equipment would pass an audit. A hair dryer, set against a licensing regime built to keep hardware with direct military applications out of the wrong hands.

One more thing about the timeline. The DOJ's release dates the Earthmade conduct to 2023 through 2024. Ars Technica and The Register both put the window at October 2023 to at least August 2026, citing court documents. If the latter is right, the scheme ran straight through the months when arrests in this trade were already making headlines.

What one arrest doesn't capture

Lui is a single defendant. The flow he allegedly served is far larger, and the estimates diverge sharply.

US authorities believe China has obtained computing resources equivalent to more than 115,000 Nvidia chips, according to Business Korea, citing Bloomberg. The analysis firm SemiAnalysis, working from supply-chain and installation data, estimates the true figure runs into the hundreds of thousands. Nvidia's own position, given to Bloomberg, is that diverted products amount to "less than one half of one percent" of its output and are "a drop in the bucket compared to the ocean of domestic compute China already has."

That is a company defending its compliance record, and it should be read as such. The honest answer is that neither figure is easy to verify, and officials concede the black market is hard to measure. What isn't in dispute is the pattern: transshipment through Thailand, Malaysia, and Singapore, shell buyers, and facilities that plainly could not house the hardware they ordered.

The March case makes the scale concrete. Prosecutors say a Southeast Asian company bought roughly $2.5 billion in servers between 2024 and 2025, with at least $510 million diverted to China in a single stretch from late April to mid-May 2025. The manufacturer's stock fell more than 25 percent before the market opened. In Taiwan, investigators found that an infrastructure firm had ordered 130 servers with Blackwell chips and diverted 74 of them to China through Japan and Indonesia, per Business Korea.

The enforcement paradox

Here is the tension, and it is a genuine one.

Washington wants Nvidia to police itself: to flag suspicious orders and tighten end-user checks, to "voluntarily" harden its protocols, in the framing of one Bloomberg investigation. Nvidia's answer has been an internal whitelist of pre-approved Asian buyers and location-tracking built into the hardware. It has said it will keep working with at least one entity US officials have flagged as a possible diversion risk until it is ordered to stop.

At the same time, the administration has been loosening the tap. It approved H20 sales to China with a 15 percent revenue-share arrangement, and separately cleared small volumes of H200s for China-based customers. Industry opposition watered down at least one anti-smuggling bill, and Jensen Huang declined a congressional invitation to testify on the problem.

The enforcement side, meanwhile, is thin. The Bureau of Industry and Security, which runs export enforcement, faces a documented shortage of overseas personnel. Analysts say it often detects the signals of diversion but cannot stop the shipments, falling back on requests for voluntary cooperation.

Put those together and you get a regime that governs paperwork, an actor with every commercial incentive to keep selling, a government that is both arresting people and relaxing the rules, and an agency that cannot be everywhere at once. That is how you end up with a highly visible enforcement layer sitting on top of a largely invisible flow.

What it means if you build hardware

If your roadmap depends on export-controlled components, the takeaway isn't that smuggling exists. It's where the controls are starting to land.

The measures showing signs of working, location tracking inside the hardware, verified end users, shorter pre-approved lists, are attached to the physical product rather than the forms. That is the direction the whole regime is moving, and it turns compliance from a legal exercise into a supply-chain design constraint. If you are sourcing accelerated compute, your provenance trail now has to survive an audit that starts from the assumption the paperwork is lying.

At DMC, this is the kind of problem we work on with hardware companies: sourcing strategy, cost modeling, and ramp planning when the rules around your bill of materials are moving as fast as the parts themselves. If your export-controlled supply chain needs stress-testing before it needs a lawyer, let's talk.