The indictment of Super Micro’s co-founder exposes not just a $2.5 billion scheme, it exposes a system that was never built to stop one.
Somewhere in a rented warehouse in Southeast Asia, a man was using a hair dryer on a server box. Not to dry it. To loosen the adhesive on a serial-number sticker, so that it could be carefully peeled away and pressed onto a different machine, one that had never been plugged in, never booted, and was never intended to reach its declared destination.
The real servers, the ones containing Nvidia’s most advanced AI accelerator chips, had already been repackaged into unmarked boxes and shipped to China. The dummy, dressed in borrowed labels, was waiting for the auditors.
That scene, reconstructed from surveillance footage cited in a federal indictment unsealed on 19 March 2026, is the most precise image we have yet of how America’s semiconductor export controls actually work in practice. Not in theory, in practice. The answer, it turns out, involves a hair dryer.
The indictment charges three men: Yih-Shyan ‘Wally’ Liaw, 71, co-founder, board member, and Senior Vice President of Business Development of Super Micro Computer; Ruei-Tsang ‘Steven’ Chang, 53, general manager of the company’s Taiwan office; and Ting-Wei ‘Willy’ Sun, 44, a contractor described by prosecutors as a ‘fixer.’
Together, they allegedly orchestrated the diversion of approximately $2.5 billion worth of servers, many assembled in the United States and integrating Nvidia GPUs, to customers in China, via a front company in Southeast Asia, between 2024 and 2025.
During a single six-week window in the spring of 2025, at least $510 million of hardware made the journey. Liaw and Sun were arrested. Chang, a Taiwanese citizen, remains a fugitive.
The charges include conspiracy to violate the Export Controls Reform Act, conspiracy to smuggle goods from the United States, and conspiracy to defraud the government, offences carrying a combined maximum of 30 years in prison.
Super Micro, the publicly traded San Jose company that makes the hardware at the centre of the scheme, has not been named as a defendant. It placed Liaw and Chang on administrative leave and terminated its relationship with Sun. It said it had been cooperating with investigators and maintained a ‘robust compliance programme.’
That phrase deserves to sit with you for a moment.
According to the indictment, the defendants and their co-conspirators communicated through encrypted messaging applications to coordinate which quantities of servers to order, which locations in China to ship them to, and, critically, how to conceal the scheme from the company’s own compliance team.
When an internal audit was scheduled, they staged thousands of non-working server replicas at a warehouse rented by the front company. When a US Department of Commerce inspector arrived to examine the same facility, they deployed the same props, using heat guns to swap labels and serial numbers before the visit.
The inspector, the indictment notes, did not see the actual servers because they had already been sent to China. An auditor from within the company who should have been on-site at a separate inspection was, according to prosecutors, ‘offsite, entertaining himself at the front company’s expense.’
The loophole that was never a secret
The transshipment route through Southeast Asia is not a discovery. It is a known, documented, and repeatedly flagged feature of the export control architecture — one that US trade analysts, think-tanks, and the Department of Commerce itself have been warning about for years. Countries including Malaysia, Singapore, Vietnam, and Thailand have historically, as analysts at the East Asia Forum observed earlier this month, ‘lacked the enforcement infrastructure or political will to rigorously monitor re-exports.’
Between April and July 2025, Vietnamese authorities intercepted more than 2,000 shipments falsely labelled ‘Made in Vietnam’ but traced to Chinese factories, according to an analysis published by The Diplomat. Malaysian tech hubs in Penang and Johor were flagged for similar rerouting practices.
DeepSeek, the Chinese AI lab that became a household name after its January 2025 model release, was accused in reporting by Tom’s Hardware of establishing ‘ghost’ data centres in Southeast Asia to pass audits, then forwarding the GPUs onward.
A Financial Times investigation estimated that China secured roughly $1 billion in advanced AI processors in the three months immediately following the last major tightening of US export controls.
The pattern, in other words, is not aberrant. It is structural. The controls are enforced primarily at the point of sale and first shipment, and they rely, almost entirely, on the declared end use of the buyer and the downstream compliance of every intermediary in the chain. When the incentive to lie is measured in hundreds of millions of dollars, the honour system has limits.
The company that keeps surviving itself
Super Micro’s appearance in this case is, in the mildest possible terms, not a surprise. The company has accumulated a regulatory history that would be remarkable in isolation but begins to suggest something more systemic when viewed in sequence.
In 2018, it was temporarily delisted from Nasdaq for failing to file financial statements. In 2020, it paid a $17.5 million fine to the Securities and Exchange Commission for what the agency described as ‘widespread accounting violations’, more than $200 million in improperly recognised revenue and understated expenses, resulting in artificially elevated sales and profit margins.
The co-founder now facing federal charges, Wally Liaw, resigned from the company during that period. He returned as a consultant in 2021, was named a senior vice president in 2022, and rejoined the board of directors in late 2023.
In 2024, short-seller Hindenburg Research published a report alleging fresh accounting irregularities, undisclosed related-party transactions, and, notably, violations of US export controls.
Ernst & Young, the company’s auditor, resigned shortly after, saying it could no longer vouch for the accuracy of management’s financial representations. Super Micro commissioned an independent special committee review; it found no evidence of fraud.
Through all of this, Super Micro has remained in the S&P 500. Its revenue for the most recent quarter was $12.7 billion.
There is a reasonable question embedded in that number: at what point does the pattern become the product? The compliance failures keep occurring. The executives implicated keep returning. The stock keeps recovering. The hardware keeps moving.
Whether Super Micro’s board and remaining leadership can provide a credible answer to that question will matter enormously, not just to investors, but to the credibility of the entire export control regime they allegedly helped to circumvent.
Enforcement in a loosening wind
Now, the irony of this week’s indictment is its timing. The Trump administration has, in recent months, been quietly relaxing the export control posture that made the hardware in question illegal to ship.
In December 2025, the White House announced it would permit sales of certain chips directly to approved customers in China.
In January 2026, the Bureau of Industry and Security issued revised licensing rules allowing case-by-case review, rather than a presumption of denial, for exports of earlier-generation AI hardware to mainland China.
A rule known as the Affiliates Rule, designed to close loopholes around Chinese-owned subsidiaries, was suspended for a year almost immediately after it was issued.
This creates a strange political geometry. The Justice Department is prosecuting men for shipping chips that US policy is, in a parallel track, beginning to permit.
There is a version of the story in which that tension resolves cleanly: the administration enforces the current rules while adjusting them for the future, and the two tracks do not contradict each other.
There is another version in which enforcement becomes selective, a tool for signalling toughness while the underlying architecture quietly softens. Which version is actually unfolding is a question worth watching closely.
Congress has been watching, and not quietly. BIS received a 23% budget increase for fiscal year 2026, with bipartisan support and explicit funding earmarked for semiconductor enforcement. Several members have sought congressional control over export licensing, frustrated by what they see as executive branch inconsistency.
What none of that resolves is the fundamental architecture of the problem. Export controls enforced at the point of sale, relying on declared end use, policed by company compliance teams that can be deceived with a hair dryer and a rented warehouse, are not, in the end, a system built for the scale of economic incentive now in play. The chip war has raised the stakes well past what the honour system was designed to hold.
The servers have already arrived. The stickers have been carefully reapplied. The dummy machines stood ready for inspection. And somewhere in a data centre in China, the real hardware is running, training models, refining weights, closing the gap.
The auditors are still on their way.
