Super Micro co-founder accused of smuggling servers to China

The indictment against the co-founder of Super Micro exposes not only a $2.5 billion scheme, but also a system that was never built to stop it.

Somewhere in a rented warehouse in Southeast Asia, a man was using a hair dryer on a server case. Do not dry it. Loosening the adhesive on a serial number label, so that it could be carefully peeled off and pressed into a different machine, one that had never been plugged in, never started, and was never intended to reach its stated destination.

The actual servers, the ones containing Nvidia’s most advanced AI accelerator chips, had already been repackaged into unmarked boxes and shipped to China. The doll, dressed in borrowed labels, awaited the auditors.

That scene, reconstructed from surveillance images cited in a federal indictment unsealed on March 19, 2026is the most accurate picture we have yet of how US semiconductor export controls actually work in practice. Not in theory, in practice. Turns out the answer involves a hair dryer.

The indictment charges three men: Yih-Shyan ‘Wally’ Liaw, 71, co-founder, board member and senior vice president of business development of Super Micro Computer; Ruei-Tsang ‘Steven’ Chang, 53, general manager of the company’s Taiwan office; and Ting-Wei ‘Willy’ Sun, 44, a contractor described by prosecutors as a ‘fixer.’

Together, they allegedly orchestrated the diversion of approximately $2.5 billion worth of servers, many of them assembled in the United States and integrating Nvidia GPUs, to customers in China, through a front company in Southeast Asia, between 2024 and 2025.

During a single six-week period in the spring of 2025, at least $510 million worth of hardware made the trip. Liaw and Sun were arrested. Chang, a Taiwanese citizen, remains at large.

The charges include conspiracy to violate the Export Control Reform Act, conspiracy to smuggle goods from the United States and conspiracy to defraud the government, crimes that carry a combined maximum of 30 years in prison.

Super Micro, the publicly traded San Jose company that makes the hardware central to the plan, has not been named as a defendant. He placed Liaw and Chang on administrative leave and ended his relationship with Sun. It said it had been cooperating with investigators and maintained a “robust compliance program.”

That phrase deserves to stay with you for a moment.

According to the indictment, the defendants and their accomplices communicated via encrypted messaging apps to coordinate what quantities of servers to order, what locations in China to send them to, and, crucially, how to conceal the plan from the company’s own compliance team.

When an internal audit was scheduled, they set up thousands of non-functioning replica servers in a warehouse rented by the front company. When a U.S. Department of Commerce inspector arrived to examine the same facility, he used the same fixtures and used heat guns to swap tags and serial numbers before the visit.

The inspector, the indictment notes, did not see the actual servers because they had already been sent to China. An internal company auditor, who should have been on site for a separate inspection, according to prosecutors, was “off site, entertaining himself at the front company’s expense.”

The legal loophole that was never a secret

The transshipment route through Southeast Asia is not a discovery. It is a well-known, documented, and repeatedly noted feature of the export control architecture, a feature that trade analysts, think tanks, and the U.S. Department of Commerce itself have been warning about for years. Historically, countries such as Malaysia, Singapore, Vietnam and Thailand, as analysts at the East Asia Forum noted earlier this month, “lacked the law enforcement infrastructure or political will to rigorously monitor re-exports.”

Between April and July 2025, Vietnamese authorities intercepted more than 2,000 shipments falsely labeled “Made in Vietnam” but traced to Chinese factories, according to an analysis published by The Diplomat. Malaysian tech hubs in Penang and Johor were flagged for similar diversion practices.

DeepSeek, the Chinese AI lab that became a household name after launching its model in January 2025, was accused in a Tom’s Hardware report of setting up “ghost” data centers in Southeast Asia to pass audits and then ship GPUs.

An investigation by the Financial Times estimated that China netted about $1 billion worth of advanced AI processors in the three months immediately following the last major tightening of US export controls.

In other words, the pattern is not aberrant. It is structural. Controls are mainly applied at the point of sale and at the first shipment, and depend almost entirely on the end use declared by the buyer and the subsequent compliance of each intermediary in the chain. When the incentive to lie is measured in hundreds of millions of dollars, the honor system has limits.

The company that continues to survive itself

The appearance of Super Micro in this case is not, in the mildest possible terms, a surprise. The company has amassed a regulatory history that would be notable in isolation, but begins to suggest something more systemic when analyzed in sequence.

In 2018, it was temporarily delisted from Nasdaq for failing to file financial statements. In 2020, it paid a $17.5 million fine to the Securities and Exchange Commission for what the agency described as “widespread accounting violations,” more than $200 million in misrecognized revenue and understated expenses, resulting in artificially high sales and profit margins.

The co-founder now facing federal charges, Wally Liaw, resigned from the company during that period. He returned as a consultant in 2021, was named senior vice president in 2022, and rejoined the board of directors in late 2023.

In 2024, short seller Hindenburg Research published a report alleging new accounting irregularities, undisclosed transactions with related parties, and, in particular, violations of US export controls.

Ernst & Young, the company’s auditor, resigned shortly afterward, saying it could no longer guarantee the accuracy of management’s financial statements. Super Micro commissioned a review by a special independent committee; found no evidence of fraud.

Despite all this, Super Micro has remained in the S&P 500. Its revenue in the most recent quarter was $12.7 billion.

There is a reasonable question implicit in that number: at what point does pattern become product? Compliance failures continue to occur. The executives involved keep coming back. The stock continues to recover. The hardware keeps moving.

It will be of enormous importance, not only for investors, but also for credibility, that Super Micro’s board and the rest of the leadership can give a credible answer to that question.the viability of the entire export control regime they allegedly helped circumvent.

Law enforcement at a time when the wind is out

Now, the irony of this week’s indictment is its moment. In recent months, the Trump administration has been quietly relaxing the export control stance that made shipping the hardware in question illegal.

In December 2025, the White House announced that it would allow sales of certain chips directly to approved customers in China.

In January 2026, the Bureau of Industry and Security issued revised licensing rules that allow for a case-by-case review, rather than a presumption of denial, for exports of older generation AI hardware to mainland China.

A rule known as the Affiliate Ruledesigned to close loopholes around Chinese-owned subsidiaries, it was suspended for a year almost immediately after its broadcast.

This creates a strange political geometry. The Department of Justice is prosecuting men for sending chips that, in parallel, American policy is beginning to allow.

There is a version of the story in which that tension is resolved cleanly: the administration enforces current rules while adjusting them for the future, and the two paths do not contradict each other.

There is another version in which law enforcement becomes selective, a tool to signal toughness while the underlying architecture quietly softens. Which version is actually being developed is a question worth watching closely.

Congress has been watching, and not silently. BIS received a 23% budget increase for fiscal year 2026, with bipartisan support and explicit funding for semiconductor law enforcement. Several members have sought congressional control over export licenses, frustrated by what they see as executive branch inconsistency.

What none of this solves is the fundamental architecture of the problem. Export controls applied at the point of sale, based on declared end use, policed ​​by company compliance teams who can be fooled with a hair dryer and a rented warehouse, are, in the end, not a system designed for the scale of economic incentives now in play. The chip wars have raised the stakes far beyond what the honor system was designed to support.

The servers have already arrived. The stickers have been carefully reapplied. The simulated machines were ready to be inspected. And somewhere in a data center in China, the real hardware is working, training models, refining weights, and closing the gap.

The auditors are still on the way.