74 B300 servers reached China. Taiwan indicted nine, including Nvidia and Supermicro staff.

Taiwan’s Keelung District Prosecutors’ Office indicted nine people on Monday over Nvidia’s B300 chips. Three of them are named employees at the Taiwan operations of Nvidia and Supermicro. Prosecutors say 74 restricted AI servers reached buyers in China, and customs officers stopped 56 more at the border.

Export enforcement usually lands on the company. A vendor loses a license, pays a fine, signs a consent agreement, and the people who filled in the forms stay anonymous. This case runs the other way. The distribution manager who allegedly approved the release of the GPUs is a defendant, and so are the two sales managers who allegedly pushed the order through. For anyone who sells, ships, or clears customs on AI hardware in Asia, the indictment is a preview of what personal exposure looks like once a vendor whitelist gets defeated.

What prosecutors say happened

The order at the center of the case was 130 Supermicro servers carrying Nvidia B300 GPUs. A Taiwanese server trading firm, Flying Tiger Technology, had cleared Nvidia’s approved-buyer check and declared itself the end user, telling the vendors the machines would be installed at a facility in Taiwan, according to the prosecutors’ account published by Taiwan’s Central News Agency. That facility was rented. Prosecutors allege it lacked the electrical capacity and the bandwidth to run 130 servers, and that one defendant told Nvidia the required verification was finished anyway.

From there the shipments split up. Fifty went to China through Indonesia, 16 went straight there, and eight traveled to Japan and on to Hong Kong before crossing into the mainland, the Associated Press reported. Customs officers held the remaining 56 in Taiwan. To keep the permit paperwork plausible, some defendants allegedly built fake mockups of Supermicro’s own website by splicing together real pieces of it.

Eight of the nine face breach of trust and document forgery, and three of those also face charges tied to siphoning company money, the Taipei Times reported. The defendants “colluded with one another at various levels for enormous profit, illegally exporting high-end servers, increasing corporate compliance costs, and severely damaging our nation’s international image,” the prosecutors’ statement said. One name is missing from the list. The person in charge of Flying Tiger Technology, surnamed Chen, was still wanted and hadn’t been indicted when CNA published its account, which also puts the proceeds from reselling the 74 servers at more than $21.2 million.

Prosecutors want up to five years for seven of the nine, defendants they describe as “driven by the pursuit of exorbitant profits,” and lighter terms for the two who confessed and cooperated, per Al Jazeera. The AP’s account differs on the arithmetic, reporting that prosecutors are seeking the maximum five-year term for four defendants. Nobody has been convicted. None of the nine has answered the charges in court.

How the whitelist was supposed to work

Nvidia and Supermicro don’t sell a B300 server the way they sell a workstation. Sales, product flow, end users and end uses for these machines are strictly controlled by the two companies, prosecutors said, as CNA relayed. A buyer has to sit on Nvidia’s whitelist. It then submits documentation naming the end user and the intended end use, which both vendors verify. Resale is barred as a condition of the sale.

Above a threshold, the check becomes physical. For any order of more than eight servers, sales staff and technicians from both companies are supposed to visit the site and confirm what the hardware will be used for. That visit is the step the alleged forgeries were aimed at. A rented Taiwan building on paper, a Chinese buyer in practice.

Two systems are stacked here, and telling them apart is the whole point of this case. Government export controls decide what may leave a country and for whom, and B300 GPUs are banned from sale to China. The whitelist and its end-use certification sit on top of that as private contract law. Nvidia decides who joins the list, both vendors verify the file, and a buyer who resells has broken an agreement before it has broken a statute. The alleged scheme went at the private layer, because that’s the layer a sales manager can sign. Nvidia sets that list for hardware it increasingly designs end to end, from the GPU out to the CPU and the network around it, which puts a lot of gatekeeping in one vendor’s hands.

Enforcement moved down to the sales desk

Chang, the distribution manager at Nvidia’s Taiwan office, is the person prosecutors call the “key figure,” responsible for “authorizing the release of the B300 GPUs” and showing “a clearly poor attitude following the offense,” the AP reported. Lin and Wang, both sales managers at Supermicro Computer’s Taiwan branch, allegedly moved the order through. The rest of the roster reads like a shipping lane. Lu is chief executive of Supermicro distributor Albatron Technology. Tsai is a project manager at data center operator Chief Telecom. Yu runs customs clearance firm Chance See International, and a second man surnamed Wang heads trading company Long Wins.

Neither company is a defendant. Nvidia spokesperson Patrick Rutherford said the company “will work with the Taiwan authorities to help them resolve the allegations as quickly as possible,” per the AP. Supermicro said its own cooperation with investigators led to the arrests, that it is not a target of the case, and that it will “enhance its robust export compliance program to protect American innovation,” Al Jazeera reported.

Washington got to individual liability five months earlier, in a different courtroom. The Justice Department charged three men in March, including Supermicro co-founder Wally Liaw, with conspiring to divert roughly $2.5 billion in Nvidia-equipped servers to China through a Southeast Asian pass-through company that fed false documents to the manufacturer, according to the indictment as reported by CNN. Supermicro wasn’t named in that indictment either. The pattern in both files is the same: a shell buyer, a forged end-user story, and transshipment through a third country.

Read the Keelung charge sheet closely and one choice stands out. Taiwan didn’t lead with an export-control offense. It led with breach of trust and forgery, two ordinary criminal statutes that turn on what an employee did with the authority an employer handed them and on what they wrote on a document. That framing needs no finding about US trade rules to function. It needs an employer that trusted a manager, and a document prosecutors can show was false. Corporate fines have a known price list. Criminal exposure for a named manager doesn’t, and two of the nine have already confessed and cooperated, which suggests the calculus shifts quickly once the defendant is a person rather than a balance sheet.

Export rules have spent 2026 reaching into decisions procurement teams used to treat as routine, from Apple qualifying Chinese DRAM to a Commerce Department freeze on an Anthropic model’s weights. This is the version where an individual sales manager is the one holding the file.

What this means for you

If your name goes on an end-use certification, you are the control. The compliance team writes the policy. Your signature is the artifact a prosecutor can point at three years later.

Three things follow. First, ask for the site-verification record on any order above eight units and keep a copy: photos, load calculations, bandwidth provisioning. A rented building with no power budget for 130 servers is a fact somebody can verify later, so verify it before you sign. Second, freight forwarders and customs brokers sit in this charge sheet next to the vendor employees, so “we only moved the boxes” is not a position the Keelung office treated as separate. Third, if a commission structure rewards closing a 130-unit order while the compliance training stops at “don’t do it,” the space between those two is exactly where this case lives.

None of it is settled. These are charges, and the nine defendants haven’t answered them in court. What has already changed is how much personal risk sits on one desk when a large AI order needs a release, and the next thing worth watching is whether Nvidia adds a second signature to whitelist approvals before a Keelung trial date is even set.