How Southeast Asia Became a Suspected Gateway for AI Chip Diversion
Nvidia CEO Jensen Huang has found himself at the centre of an unusual controversy involving a former executive of Singapore-based AI cloud provider Megaspeed International. On November 8, Nvidia announced an independent investigation into reports that Huang had been targeted by a foreign intelligence operation. The reports identified the woman involved as Alice Huang, a Chinese businesswoman who previously held a senior role at Megaspeed. Jensen Huang acknowledged having an extramarital affair but did not name her. US authorities reportedly believe Alice Huang was recruited by China’s Ministry of State Security, an allegation that Reuters has not independently verified. Nvidia, meanwhile, said it had no reason to believe that company trade secrets or national security information had been compromised.
The controversy has brought renewed attention to Megaspeed, a company already under scrutiny over its role in the regional AI hardware supply chain. In an investigation published in December 2025 and corrected in January 2026, Bloomberg reported that Megaspeed had become Southeast Asia’s largest buyer of Nvidia chips, importing tens of thousands more processors than Nvidia had accounted for during checks of its data-centre facilities. The discrepancy raised questions about where the hardware was ultimately deployed. US authorities have investigated whether Megaspeed helped Chinese customers obtain advanced Nvidia processors subject to export controls. However, there has been no public finding that the company violated those rules.
The concerns surrounding Megaspeed sit within a broader pattern of investigations into how advanced AI hardware moves through Southeast Asia. In March 2025, Singaporean authorities investigated whether servers supplied by Dell and Supermicro to local companies contained Nvidia chips that were subject to US export restrictions. The servers had been shipped from Singapore to Malaysia, with investigators examining whether suppliers had been misled about their intended end-users and whether the hardware was subsequently sent elsewhere. Singapore's authorities said at the time that the final destination had not been established.
More recently, Malaysian customs seized 30 servers containing advanced AI chips at Kuala Lumpur International Airport on October 15, announcing the seizure on October 28. The shipment, valued at approximately US$12.2 million, had allegedly been misdeclared as electronic components and was due to be re-exported to another Asian country without the required permit. Authorities said the case could be linked to a wider network suspected of involvement in five attempted smuggling operations, including a separate seizure of 72 servers in June. The investigation remains ongoing, and officials have not disclosed the chips' origin or intended final destination.
Taken together, these cases show why Southeast Asia has become an important focus of US export-control enforcement. The region is investing heavily in data centres and AI infrastructure, while its established logistics and technology networks connect global hardware suppliers with customers across Asia. Those same networks can also make it difficult to establish where advanced chips ultimately end up and who has access to their computing power. As Washington seeks to prevent restricted technology from reaching prohibited end-users in China, regional governments and companies face growing pressure to demonstrate that they can track, verify and control the movement and use of sensitive hardware.
Vietnam Is Closer to This Issue Than It Might Seem
While regulatory attention has centered on Singapore and the industrial clusters of Johor, Vietnam is far from insulated from the fallout. A September 2026 investigative report by the Center for Advanced Defense Studies (C4ADS), titled Covert Compute: How Advanced AI Chips Reach China, mapped out the discreet commercial conduits funnelling controlled processing units toward Chinese entities. C4ADS identified 50 export shipments of restricted Nvidia GPUs diverted through trade networks involving Vietnam, India and Malaysia to Hong Kong and China between 2023 and 2025, with a combined value of approximately US$13.4 million.
The C4ADS findings highlight the complex, multi-jurisdictional mechanics of contemporary technology diversion. Intermediate brokers rarely attempt direct contraband shipments from California to Shenzhen; instead, consignments are routed through secondary and tertiary logistical depots, masked by ambiguous corporate registrations and re-billed through regional logistics providers. The presence of Vietnam on documented logistics manifests does not imply institutional complicity or suggest that legitimate Vietnamese domestic tech companies participated in illicit trade. Rather, it reveals that the country’s bustling export-processing zones and maritime freight networks are being opportunistically exploited by foreign diversion rings.
This supply-chain vulnerability emerges at an exceptionally delicate juncture for Hanoi. Vietnam has staked significant national prestige and industrial policy on transforming itself into a credible, trusted alternative to China in high-technology manufacturing and artificial intelligence. The government’s technology diplomacy has already borne tangible fruit across several marquee partnerships:
In December 2024, Nvidia signed a cooperation agreement with the Vietnamese government to establish an AI research and development centre and an AI data centre, supporting the country's ambitions to build its own AI capabilities. In parallel, Vietnamese telecommunications and software giant FPT committed $200 million in April 2024 to construct a dedicated "AI Factory," an enterprise platform underpinned by Nvidia H100 Tensor Core GPUs and Nvidia’s proprietary enterprise software stack. By February 2026, state-owned telecoms champion Viettel accelerated the country’s high-performance computing roadmap by formally deploying Nvidia DGX B200 systems.
These multimillion-dollar investments reflect Vietnam’s ambition to move up the technology value chain, from electronics assembly to advanced computing and AI development. But building that capacity also brings a compliance challenge: some of the high-performance chips needed to power these projects may be subject to US export controls, depending on their technical specifications and intended use. As Vietnam expands its computing infrastructure, ensuring that such hardware is sourced, deployed and used in accordance with export rules will become increasingly important. Some of the advanced chips used in these systems may fall under US export controls, depending on their model and technical specifications.
As Vietnam imports more advanced computing hardware and expands its cloud infrastructure, its exposure to international export-control requirements will also grow. Under US regulations, certain controlled chips remain subject to restrictions even after being exported from the United States. Their subsequent use, transfer and access by third parties can create additional compliance obligations for companies operating overseas. For Vietnamese businesses, this means that securing access to advanced hardware is only one part of the challenge; demonstrating that it is being used in accordance with applicable export controls is another.
What Does Tighter US Export-Control Enforcement Mean for Vietnam?
The practical consequences of tighter US enforcement extend well beyond ordinary customs clearances. For Vietnamese technology executives and policymakers, the evolving framework of the US Bureau of Industry and Security (BIS) demands a structural transformation in corporate compliance, spanning end-user scrutiny, hardware telemetry, and post-sale monitoring.
The first pressure point lies in Know-Your-Customer (KYC) obligations, which now scrutinise who is leasing computing capacity rather than just who purchased the motherboards. In its guidance issued in May 2025 regarding the diversion of advanced integrated circuits, the BIS warned global technology providers that opaque ownership structures, untraceable installation sites, and poorly vetted customer rosters constitute significant red flags.
For Vietnamese data-centre operators offering Infrastructure-as-a-Service (IaaS), this introduces unprecedented regulatory exposure. Consider a legally compliant Vietnamese facility operating a cluster of Nvidia H100 or B200 servers. If that facility rents compute power to a boutique foreign software developer that secretly resells model-training time to an entity on the US Entity List, the host operator risks facilitating an unauthorised export. Validating ultimate beneficial ownership down through third-party platform tenants has transitioned from a routine legal check into an urgent defensive necessity.
The second operational challenge involves end-user verification and hardware provenance. Regulators are no longer satisfied with static paperwork stamped at the port of entry; they expect continuous proof of physical custody. In a September 2026 study titled Tracking AI Chips: Assessing Location Verification as an Export Control Enforcement Tool, researchers Jacob Feldgoise, Kyle Miller, and Hanna Dohmen from Georgetown University’s Center for Security and Emerging Technology (CSET) examined how regulators could verify the physical location of advanced AI chips.
The CSET analysis identified ping-based location verification, which estimates a chip's location by measuring signal travel times to trusted servers, and physical inspections as the most viable approaches. However, the technology has limitations: it can generate leads on potential diversion but cannot reliably identify who is accessing a chip or prevent every attempt to conceal its location. Hardware telemetry can confirm that a server remains bolted to the floor of a data hall in Da Nang or Hoa Lac, but it cannot independently determine the geographic origin of the developer querying the cluster via an encrypted API tunnel.
Finally, Vietnamese enterprises must contend with the re-export jurisdiction embedded in US export law. As legal analysts at Morgan Lewis observed in a February 2026 assessment of global data-centre projects, US-origin controlled items remain subject to the extraterritorial reach of the EAR throughout their operational lifecycles. US export controls can continue to apply to covered US-origin items after they enter another country. Subsequent re-exports and certain transfers within a country, including changes in end-user or end-use, may require authorization depending on the item's classification and the parties and activities involved. Companies that knowingly facilitate prohibited transactions may face civil or criminal enforcement under the EAR, while entities found to undermine US national-security or foreign-policy interests could also face restrictions on their access to US-origin technology.
Could Compliance Become a Competitive Advantage for Vietnam?
Navigating this web of regulatory requirements will inevitably introduce commercial friction into Vietnam’s digital economy. The financial burden of sustained compliance is steep, requiring data-centre operators to dedicate significant capital to specialized legal counsel, continuous hardware auditing software, and multi-tier customer verification tools. High-value procurement cycles will lengthen, as international suppliers demand extensive end-user documentation and government assurances before shipping high-density computing racks. Vietnamese firms characterized by complex cross-border ownership or ambiguous commercial ties will find it increasingly difficult to secure primary-source allocations of top-tier processors.
Yet this regional crackdown also presents an opportunity for Vietnam to distinguish itself from its regional peers. Malaysia’s recent tightening of licensing rules and high-profile port seizures illustrate the growing scrutiny of semiconductor transshipment in Southeast Asia. Separately, under the US-Malaysia Agreement on Reciprocal Trade, signed in October 2025, Malaysia committed to closer cooperation with Washington on export controls, including aligning with US unilateral controls on sensitive technologies and taking measures against illicit transshipment. For Vietnam, the lesson is clear: stronger oversight and credible enforcement could help build the trust needed to maintain access to advanced technologies.
Vietnam possesses a distinct structural advantage in this race. The country’s foundational technology roadmap, enshrined in the Prime Minister’s Decision 1018/QĐ-TTg in September 2024, explicitly outlines a strategy to position Vietnam as a secure, trusted link in the global semiconductor supply chain through 2030, with a view toward 2050. The national strategy emphasizes not merely the expansion of computational capacity, but the institutional reliability of Vietnam's industrial ecosystem.
If Vietnamese authorities pair robust customs interdiction with a transparent regulatory environment for data-centre compliance, the country can distinguish itself from regional transit hubs that suffer from enforcement deficits. Proactive alignment with international export-control standards could insulate domestic tech leaders like FPT and Viettel from external regulatory actions, assuring Western partners that capital deployed in Vietnam is legally secure.
The global competition for AI infrastructure is no longer waged solely on cheap power, fibre density, and industrial subsidies. In an era of fragmented supply chains and heightened national security reviews, regulatory integrity has become an indispensable element of national competitiveness. By treating compliance not as an administrative burden, but as a core competitive discipline, Vietnam can safeguard its computing ambitions and secure its position as a trusted digital partner in Southeast Asia.