Nvidia chip smuggling China case: what the $300 million Greg Lui indictment alleges

A California tech executive has been arrested in the Nvidia chip smuggling China case that the Justice Department announced on October 1, 2026. Greg Lui, 38, of San Gabriel, is charged with moving more than $300 million of export-controlled servers, built around U.S.-made GPUs, to China through Malaysia and Singapore. The case is allegation, not proof: an indictment returned on September 29 is, in the department's own words, "merely an allegation." But the paperwork it describes is a useful, concrete look at how the chip export rules are meant to work, and where they leak.

What the indictment alleges

According to the Justice Department press release, Lui owns Earthmade Computer Inc., a technology company based in City of Industry, California. From 2023 to 2024, he and co-conspirators allegedly used it to buy export-controlled servers and send them abroad without the licenses the Commerce Department requires. The route ran through countries such as Malaysia and Singapore, where, the department says, no such license is required, and then on to China.

The charges are three: one count of conspiracy to violate the Export Control Reform Act and the Export Administration Regulations, one count of outbound smuggling, and one count of conspiracy to commit money laundering. If convicted on all counts, the maximums are 20 years on the conspiracy count, 20 years on the money laundering count and 10 years on the smuggling count. The investigators are the Commerce Department's Bureau of Industry and Security (BIS) Office of Export Enforcement, the Defense Criminal Investigative Service and the FBI.

The release gives dates and figures rather than adjectives. From January 2024 to October 2024, Earthmade allegedly received more than $176 million from two Malaysia-based shipment companies. In January 2024, Lui allegedly emailed a conspirator about a Malaysian company that wanted 70 servers with restricted GPUs, attaching a compliance form showing that company knew of the U.S. restrictions. Later that month he allegedly placed a purchase order with a U.S. manufacturer for 27 servers, about $7,614,000, and had them shipped from Los Angeles to Kuala Lumpur. In March 2024, the release says, a co-conspirator emailed a Malaysian government official that those 27 servers had been transshipped to a China-based buyer.

The alleged lie was simple. Lui and co-conspirators, the department says, gave U.S. manufacturers false documentation saying the equipment was headed to permissible end users and destinations that did not need a license.

The rule underneath

The law behind the charges is the Export Control Reform Act of 2018. Under 50 U.S.C. 4819, a willful violation, or a willful conspiracy to commit one, carries a fine of up to $1 million and, for an individual, up to 20 years in prison. That matches the 20-year ceiling on the conspiracy count. Civil penalties can reach $300,000 or twice the value of the transaction, whichever is greater.

The technical rules sit in the Export Administration Regulations, which BIS writes. The key rulemaking is the Advanced Computing and Supercomputing interim final rule published in the Federal Register on October 25, 2023 (88 FR 73458). BIS describes its purpose as protecting U.S. national security by further restricting China's ability to obtain technologies that could modernize its military. It builds on an October 7, 2022 rule that first controlled advanced computing chips and the computers that contain them.

In the current eCFR text of section 742.6, license applications for the most advanced items, under export control classification numbers 3A090 and 4A090, to Macau or destinations in Country Group D:5, which includes China, are reviewed under a presumption of denial, with case-by-case review only for narrowly defined lower-performance items. In plain terms: a license for a China end user is meant to be refused, so the alleged plan routed around the license rather than applying for one.

That is the structural weakness the case exposes. A shipment to Kuala Lumpur or Singapore needs no license on the department's account, so the control depends on honest end-user paperwork and on someone noticing when a small market absorbs a very large number of servers.

What Bloomberg and Nvidia add

The case landed alongside a Bloomberg feature, published October 1, titled "Nvidia Faces Questions Over China AI Chip Smuggling Cases" in its web edition. We could not open Bloomberg, which blocked our request, so we rely on two outlets that summarize it. AI Weekly reports that Nvidia removed more than half of its previously authorized Asian AI-chip buyers after tightening its approved-buyer list, and that the company told Bloomberg "Smuggling is a nonstarter." Engadget, on October 2, reports that an Nvidia spokesperson answered the red-flag criticism by saying "A startup's growth plan in a friendly nation is an opportunity for America, not a 'red flag' to be feared." Treat those as secondhand until Bloomberg's text is read directly.

Nvidia is not a defendant in the Lui case, and the Justice Department release does not accuse it of anything. Engadget says Nvidia states it has never been accused of abetting smuggling. The question Bloomberg raises is policy, not liability: whether chipmakers and server makers should be held to a higher standard for spotting diversion.

Our read

The most useful detail in the release is not the $300 million. It is the compliance form. A buyer in Malaysia allegedly signed paperwork acknowledging the U.S. restrictions, and the servers still reportedly ended up in China within weeks. Forms that record knowledge do not stop diversion; they only make prosecution easier afterward.

That argues for three things we would watch. First, whether BIS tightens its expectations for end-use checks on shipments to transit hubs, since the department says the hubs themselves require no license. Second, whether the Lui case produces a plea, a trial date or named co-conspirators; the release refers to unnamed co-conspirators and two Malaysia-based companies without naming them. Third, whether Congress presses for hardware location verification or reporting duties on server makers. None of that is decided, and we have not seen a proposal in the sources we could open.

For readers tracking the wider AI race, the point is practical. Export controls on chips are the main U.S. lever on Chinese compute, and our reporting on an open Chinese model that trails the U.S. frontier by months shows why that lever matters. Enforcement cases like this one measure how strong the lever really is. One indictment proves nothing about total flows, and nobody outside government has a verified count of how many restricted chips reached China.

We would treat this as a live case: the facts are the department's allegations as of October 1, 2026, and the defendant is presumed innocent. We will update when there is an arraignment outcome or a court filing worth reading.