California CEO Charged Over Restricted Servers Sent To China

I keep coming back to a number that does not behave like a normal invoice. More than $300 million. That is the scale prosecutors say sits behind a San Gabriel businessman, a City of Industry computer firm barely two years old, and a chain of shipments that began in California and, they claim, ended in China. If you have ever watched a compliance team argue over a single graphics card, the size of this case feels almost rude. It is not a laptop in a suitcase. It is racks of export-controlled servers, Nvidia-class accelerators, bank wires from Malaysia, and a lumber company that suddenly wanted high-end compute.

Greg Lui, 38, also known as Yiu Kong Lui, was arrested in Los Angeles County on October 1, 2026, two days after a federal grand jury returned a three-count indictment. He is accused of conspiracy to violate export-control laws, outbound smuggling, and conspiracy to commit money laundering. Earthmade Computer Inc., the firm he owned and ran, has not itself been charged. Neither has a second City of Industry company named in the paperwork. That distinction matters, and so does the fact that these remain allegations. An indictment is a formal accusation. It is not a verdict.

What Prosecutors Say Happened And Why The Route Matters

The story, as laid out in the charging document, starts no later than October 2023 and runs through at least August 12, 2026. The detailed examples cluster in 2024. That year, Lui and unnamed others allegedly bought high-end servers and graphics processing units from American manufacturers, then moved them through Malaysia and Singapore before the hardware reached China. Payments from Malaysia landed in Earthmade bank accounts in the United States and were used, prosecutors say, to purchase the restricted machines.

Between January and October 2024, one Malaysian company sent Earthmade more than $80 million. Another sent about $96 million. Together those flows help explain how a young reseller could broker nearly $300 million in sales of export-controlled, Nvidia-powered servers from three U.S. manufacturers. I have sat through enough trade-finance reviews to know that volume like that does not hide in a shoebox. It hides, if it hides at all, inside ordinary-looking wires and commercial invoices that only look strange once you ask what the buyer actually does for a living.

A Lumber Trader And A Server Order

One of the Malaysian companies had been around since 1999. Its ordinary business was lumber, plywood, millwork, and wood panels. Prosecutors describe the second Malaysian entity as a front. In January 2024, Lui allegedly told a co-conspirator that the lumber company wanted 70 servers containing Nvidia H100 GPUs. Later that month he placed an order for 27 of those servers, worth about $7.6 million.

Those machines left Los Angeles County for Kuala Lumpur. Less than two months later, a co-conspirator emailed a Malaysian government official and stated that the 27 servers had been transshipped to a Chinese purchaser. That email, if the account holds up in court, is the kind of sentence compliance officers lose sleep over. Not because it is dramatic. Because it is administrative. A status update. A destination that was not the destination on the original commercial story.

Transshipment is not automatically illegal. It becomes a problem when the paperwork is built to hide the real end user of controlled technology.

Perhaps the most interesting aspect of this first cluster is how ordinary the cover looks. Wood products are a real trade. Malaysia is a real logistics hub. Servers are a real product that data-center builders buy every week. The allegation is that those three true things were arranged so a fourth thing, a controlled shipment into China, could pass as routine.

The Larger Order And The Hong Kong Leg

A second order was far bigger. In April 2024 a U.S. manufacturer quoted Earthmade for 512 export-controlled servers. Lui placed the order the next day. The indictment traces 92 of those machines in detail. A manufacturer had said they were ready to ship to Earthmade in Los Angeles County. Prosecutors allege Lui and a co-conspirator instead had them flown from San Francisco to Kuala Lumpur and then onward to Hong Kong, with the Chinese purchaser listed as consignee.

The purchaser is identified only as an unnamed industrial company based in Hangzhou. That gap is deliberate in public reporting, and it is worth sitting with. Hangzhou is a major commercial city. An industrial buyer there could be many things. What the charging theory cares about is not the skyline. It is whether the servers were controlled items, whether the export required a license that was never obtained, and whether the route was chosen to dodge that requirement.

Flying hardware out of San Francisco when the seller thought it was headed to a Los Angeles buyer is a small operational choice with a large legal meaning. In my experience, diversion cases rarely turn on a villain monologue. They turn on a change of airport, a revised consignee, a freight forwarder who was told one story and a manufacturer who was told another.

The Front Company Inside The United States

Prosecutors describe another transaction involving 100 servers equipped with Nvidia H100 GPUs, worth more than $22 million. Lui allegedly used an unnamed U.S. front company to place the order and claimed that another City of Industry firm, Topmost, was the buyer. He then submitted false documents identifying a “Jackie Lui” as Topmost’s chief executive.

Topmost has not been charged. The indictment also alleges that Lui bought another person’s identifying documents in 2021 and later used that identity in business transactions tied to the export scheme. Separately, a person presented as chief technology officer of the Malaysian lumber company was, prosecutors say, actually an international broker of export-controlled servers who incorporated Topmost in California.

That last detail is the sort of thing that makes a case feel less like a one-man improvisation and more like a structure. A broker who can wear a technology title at a wood company and also stand up a California entity is useful precisely because each role looks plausible on its own. Stacked, they give a seller three different answers to the question every controlled-goods desk is supposed to ask: who is the customer, really?

Why H100-Class Servers Sit On The Restricted List

The H100 is not a gaming card you pick up on a weekend. It is a data-center accelerator built for training and running large artificial-intelligence models, for scientific computing, and for workloads that used to require a room of older machines. U.S. export rules treat certain advanced computing items as dual-use technology. The same chip that recommends a movie can also train systems with military, intelligence, or surveillance uses. That is the policy bet behind the controls, whether you agree with the bet or not.

Rules in this area tightened in stages after 2022, with performance thresholds, interconnect limits, and destination-based license requirements aimed especially at China. Manufacturers and resellers are expected to know their customer, know the end use, and stop a sale when the paperwork does not add up. A license is not a courtesy. For controlled servers headed to certain end users, it is the transaction.

Nvidia, asked about the case, said smuggling is a losing proposition legally, economically, and technically, and that work with law enforcement has already produced prosecutions. The company said it would keep engaging with investigators. That is a vendor protecting a compliance posture. It is also a reminder that the chip designer does not control every reseller two or three steps downstream.

Roman Rozhavsky, assistant director of the FBI Counterintelligence and Espionage Division, said the bureau’s investigation found that Lui allegedly sold hundreds of millions of dollars of the technology to the Chinese government. That is a stronger claim than “a Hangzhou industrial company.” Readers should hold both sentences at once. One is a public characterization from a senior investigator. The other is what the indictment excerpt describes as the named purchaser class. Trials exist to test which description the evidence can carry.

The Charges And What They Actually Weigh

Three counts. Conspiracy to violate export-control laws. Outbound smuggling. Conspiracy to commit money laundering. If convicted on all of them, Lui faces statutory maximums of 20 years on the export-control conspiracy, 20 years on the money-laundering conspiracy, and 10 years on the smuggling count. Maximums are not predictions. Federal sentences, when they come, follow guidelines, plea decisions, and judicial discretion. Still, the ceiling tells you how seriously the statute treats the conduct.

He was expected to make an initial appearance and be arraigned on October 2 in federal court in downtown Los Angeles. Earthmade was established in November 2023. Lui was its chief executive and owner, and the registered agent of another company, Coindigger, that did business as Earthmade. A firm that young booking nine-figure hardware volume is not impossible in a boom market. It is unusual enough that a bank, a manufacturer, or a freight forwarder might reasonably have asked a second question.

• Export-control conspiracy focuses on an agreement to ship controlled items without the required authorization.
• Outbound smuggling focuses on the physical movement of goods out of the country contrary to law.
• Money-laundering conspiracy focuses on moving the proceeds, or the purchase funds, in a way designed to conceal the scheme.

You can see why prosecutors like to charge the money count alongside the export count. Hardware can be argued over. Wires are quieter and harder to romanticize. If Malaysian payments funded U.S. purchases that were then diverted, the banking trail becomes the spine of the story.

How A Diversion Usually Gets Built

I am not inside this investigation, and neither are you. What follows is the pattern these cases tend to share, set against the specific allegations already public. It is a map, not a confession.

First comes a buyer who can pass a shallow screen. A registered company. A local address. A story about building a cloud, a research cluster, a rendering farm. Second comes a seller who wants the revenue and is handed documents that look complete. Third comes a logistics tweak. The goods leave a different airport. The consignee changes after the commercial invoice is cut. A hub in a third country receives the freight and sends it on. Fourth comes the money, which often moves in the opposite direction of the crates and arrives before anyone argues about end use.

Malaysia and Singapore show up in this indictment because they are competent trade hubs, not because a harbor is guilty. Competent hubs are exactly what a diversion needs. The allegation is misuse of that competence. A lumber trader ordering H100 servers is the tell, if the tell is real. Wood companies do not spontaneously become hyperscale computing buyers. Someone has to explain the jump. Prosecutors think they can.

Tables flatten a case. The lived version is emails, air waybills, and a manufacturer who thought the customer was local. If you work in trade operations, you already know which column would have stopped the shipment at your desk. If you work in sales, you know which column would have been waved through on a Friday.

The Identity Allegation Is A Separate Kind Of Risk

Buying another person’s identifying documents in 2021, then using that identity in later transactions, is not a paperwork footnote. If proved, it suggests the scheme had a longer runway than the November 2023 incorporation date of Earthmade. Identity misuse lets a person open accounts, sign forms, and survive a first-pass know-your-customer check that is looking for a name, not a biography.

False documents naming “Jackie Lui” as Topmost’s chief executive sit in the same family of problems. Sellers of controlled hardware are not detectives. They are, however, required to notice when the buyer on the purchase order, the signer on the end-user statement, and the company that will actually receive the freight are three different stories. The indictment says those stories were supplied. It will be for a jury, or a plea, to decide whether they were believed.

What This Does To The Legitimate Server Market

Here is the part that rarely makes the headline and still moves prices, lead times, and credit terms. Every public diversion case makes the next legitimate order slower. Manufacturers add questionnaires. Distributors cut payment terms. Banks file more suspicious-activity reports on electronics wholesalers they used to treat as boring. A founder in City of Industry who actually builds domestic clusters pays, in time, for a case that has nothing to do with the founder’s customers.

I have found that the cost shows up in odd places. A delayed export classification. A freight forwarder who now wants the end-user certificate before quoting a rate. A credit analyst who treats any Malaysia-to-California wire tied to GPUs as a reason to call the relationship manager. None of that is written into the statute. All of it follows from the statute being enforced in public.

There is a counter-cost too. Controls that are broad, and enforcement that is uneven, push determined buyers toward gray routes. That is not an argument for ignoring the rules. It is an argument for noticing that a $300 million allegation is evidence the rules are being tested at industrial scale, not at the scale of a hobbyist forum. Policy people can argue about thresholds. Operators have to assume the threshold is real until a license says otherwise.

Singapore, Malaysia, And The Geography Of A Detour

The indictment points to Malaysia and Singapore as transit points, with Kuala Lumpur and Hong Kong appearing in the shipment narrative. Geography here is not color. It is a sequence of jurisdictions, each with its own customs form and its own incentive to keep freight moving. A crate that is lawful to import into a hub is not automatically lawful to re-export to a controlled destination. That gap is the entire business model of diversion, and also the entire job of a re-export screening.

Hong Kong as a consignee city adds another layer people in this trade already argue about at conferences. It is a major port. It is also, in recent enforcement thinking, a place where goods can be staged before a shorter final hop. Listing a Chinese purchaser as consignee on the onward leg, as prosecutors describe, collapses some of that ambiguity. The paperwork, on their account, named the endpoint.

Would a Malaysian official’s inbox, receiving a note that 27 servers had been transshipped, have been the moment to stop the next order? Maybe. Officials receive a lot of notes. The legal question for the defendants, if the case is tried, is what they knew and intended when the goods left California, not what a foreign ministry did with an email after the fact.

Money First, Machines Second

Follow the payments and the hardware almost narrates itself. Malaysian companies send tens of millions into U.S. accounts. Those accounts buy restricted servers from American manufacturers. The servers leave for Southeast Asia. A later message says they moved on to a Chinese purchaser. A separate batch is flown toward Hong Kong with that purchaser as consignee. A third batch is ordered through alleged front paperwork.

Money-laundering conspiracy, in a case like this, is often about the purpose of the movement rather than a suitcase of cash. Using business accounts to buy goods that will be illegally exported can be charged as laundering of the funds involved in the specified unlawful activity. That is a mouthful. The practical version is simpler. If the wires existed to make the diversion possible, the wires are part of the case, not a side ledger.

Nearly $300 million in brokered sales is also a market fact, allegation or not, that risk teams will paste into briefing decks. It says the gray channel, if the government is right, was not a side hustle. It was a book of business. Books of business need suppliers willing to ship, banks willing to clear, and buyers willing to pay a premium for access they cannot get directly. Everyone in that chain will now be asked, by someone, what they checked.

What Manufacturers Can Actually See

A U.S. manufacturer quoting 512 servers is not blind. It sees the purchase order, the ship-to, the credit file, and whatever end-use statement the buyer signed. It does not automatically see the second air waybill cut after the goods leave the dock. The allegation that machines ready for Los Angeles County were instead flown from San Francisco is exactly the kind of handoff where visibility breaks. One party thinks the sale is domestic. Another party has already booked international freight.

Good programs try to close that gap with ship-hold rights, serial tracking, and a rule that freight instructions come only from the seller. Gaps remain. Resellers exist because manufacturers cannot staff every regional deal. The policy tension is old. You want a channel that can serve universities and hospitals quickly. You also want that channel incapable of moving a controlled cluster to a prohibited end user over a weekend. Those two wants fight.

A practical diversion screen, reduced to the questions that matter:
  Who pays, and does their business match the order?
  Who receives, and is that the party on the invoice?
  Who uses, and is that use allowed without a license?
  If any answer changes after the quote, the quote is dead.

That checklist is not legal advice. It is the version I would want on a wall. The lumber-company fact pattern fails the first question so cleanly that it is almost a teaching example. A plywood trader does not need 70 H100 servers. If someone says they do, the next sentence should be a request for the data-center plan, the power contract, and the name of the engineer who will rack the machines. Silence after that request is an answer.

Banks Are In This Story Whether They Like It Or Not

Earthmade’s U.S. accounts allegedly received the Malaysian funds and paid the manufacturers. Banks are not exporters. They are still expected to notice when a new computer reseller starts clearing nine-figure international wires tied to controlled goods. The public record here does not accuse any bank. It does describe a flow that transaction-monitoring teams are paid to flag: new company, sudden volume, high-risk product category, counterparties whose stated trade does not match the goods.

Would a flag have stopped the scheme? Sometimes flags produce a phone call, a plausible answer, and a relationship manager who wants to keep the fee income. Sometimes they produce an account closure that simply moves the next wire to another institution. Enforcement against the exporter does not resolve that game. It does make the next call less casual.

The Technical Claim That Smuggling Fails

Nvidia’s comment that smuggling fails technically, not only legally, is easy to skip and worth unpacking. Modern accelerators are not anonymous appliances. They sit inside support contracts, firmware updates, cluster-management software, and supply chains that notice odd serial batches. A buyer who cannot get official service, spare parts, or software entitlement is running a depreciating asset in a field where the next generation arrives quickly. That does not make diversion pointless for someone who wants capability now. It does cap the value of a stolen or diverted generation.

Economically, diverted hardware often clears at a premium that reflects the legal risk. Pay that premium on a $7.6 million slice and the markup is painful. Pay it across a book approaching $300 million and you are describing a market large enough to attract exactly the attention this indictment represents. The losing proposition, if the company’s line holds, is that the buyer overpays for hardware that is harder to support and more likely to trigger a knock on the door. We will see whether defendants argue the hardware was uncontrolled, misclassified, or never theirs to explain.

A Note On Names, Companies, And What Has Not Been Charged

Lui is the person arrested. Earthmade has not been charged. Topmost has not been charged. Coindigger appears as a related business name, not as a defendant in the public summary. Unnamed co-conspirators are described but not identified in the account available so far. An industrial company in Hangzhou is a purchaser in the narrative, not a charged party in what has been reported. Holding those lines straight is basic fairness. Investigations widen. They also sometimes stop at the person who signed.

The FBI description that the technology was sold to the Chinese government is a claim about end use and end user. It may be proved with documents that are not yet public. It may be narrowed. Readers who treat every industrial buyer in a major Chinese city as a state organ will misread the commercial map. Readers who treat the phrase as empty will misread the investigator who used it. The honest position is in between, waiting on evidence.

What Compliance Teams Should Take From The Fact Pattern

You do not need this case to invent a policy. You need it as a drill. Walk a hypothetical 27-server order through your own desk and see where it would have stopped.

1. Match the buyer’s historic trade to the goods. Wood products versus accelerators is not a close call.
2. Refuse third-party pickup instructions that differ from the contracted ship-to without a fresh screening.
3. Treat a brand-new reseller ordering nine figures of controlled servers as a license question, not a credit question.
4. Lock serial numbers to the authorized end user and make diversion a breach that stops warranty and support.
5. Escalate any request to rename the buyer, the CEO, or the consignee after the quote is issued.

None of those steps catch a determined insider who forges every document and lies to every counterparty. They catch the version of this allegation that relied on a lumber letterhead and a second airport. Most diversion is closer to the second kind than the first. People reuse what already works.

Investors And Operators Are Reading Different Pages

If you allocate capital, this story is a reminder that export enforcement is now a line item in semiconductor risk, not a footnote in a trade journal. Advanced packaging, accelerator supply, and data-center buildouts in Asia all price in the chance that a gray channel gets closed mid-quarter. A single indictment does not change global GPU availability. A pattern of them changes how distributors extend credit and how cloud builders talk about “unofficial” capacity.

If you operate, the story is more local. It is a purchase order, a bank, a forwarder, and a customer whose website still talks about plywood. Those are checkable facts. The strategic debate about whether performance thresholds are the right tool can wait until after you have decided whether this order ships. I lean toward shipping less, and documenting more, whenever the customer’s trade and the product do not rhyme. You can lose a deal. You can also lose the ability to sell to anyone else in the category.

The expensive mistake is not missing a sale. It is explaining, later, why the sale looked fine on the day the crate left.

A compliance lead who has sat through one too many freight reviews

The Timeline, Held In One Place

Identity documents allegedly purchased in 2021. Earthmade established in November 2023. Conspiracy alleged from no later than October 2023 through at least August 12, 2026. The richest transaction detail sits in 2024: the 27-server order in January, the 512-server order in April, the Malaysian inflows across the first ten months of the year, the 100-server front-company transaction. Arrest on October 1, 2026, after an indictment two days earlier. Arraignment expected the following day.

That spread matters. A scheme that runs for years, if proved, is harder to frame as a clerical error. A scheme whose public examples are concentrated in a single hot year for AI hardware is also easier to place in a market context. 2024 was when everyone who could buy accelerators tried to buy accelerators. Scarcity is a gift to anyone willing to misstate an end user. Scarcity is not a defense.

What Remains Unproven

Everything in an indictment is unproven at the moment of arrest. Lui is presumed innocent. Co-conspirators have not been publicly named in the summary of the case. The Hangzhou company has not been charged in the account given so far. Earthmade and Topmost have not been charged. The email to a Malaysian official, the San Francisco flight path, the false CEO documents, the 2021 identity purchase: these are allegations the government will have to support with records, witnesses, and testimony.

Defense counsel, once heard, may argue classification, licensing exceptions, a break in the chain of custody of intent, or that intermediaries acted outside any agreement Lui joined. Those arguments are not in the public charging summary. Leaving space for them is not softness. It is how a reader avoids turning a press account into a verdict.

Why The Case Will Travel Beyond One Courtroom

Export cases involving accelerators travel because the product is strategic and the route is copyable. A lumber-company cover, a California reseller, a Kuala Lumpur hop, a Hong Kong consignee: if that sequence worked even briefly, other brokers have already studied it. Enforcement publicity is part of the deterrent. So is the unglamorous work of serial-number audits and bank exits.

There is a geopolitical layer, and it is easy to overdraw. Controls on advanced computing are an instrument of state competition. A criminal case is still a criminal case. It alleges specific lies, specific shipments, specific wires. Collapsing it into a speech about civilizations explains less than the air waybill. The policy can be debated on its own terms. The defendant, if the government is right, did not wait for that debate to finish.

I keep returning to the 27 servers and the later email. Small enough to picture. Large enough, at $7.6 million, to matter. If a co-conspirator could write, in ordinary language, that those machines had been transshipped to a Chinese purchaser, then the scheme’s own paperwork may be its most awkward witness. Cases like this are often won or lost on the defendant’s emails, not on the spec sheet of the GPU.

Questions Worth Asking Before The Next Quote Goes Out

Does the buyer’s filed business match a purchase of export-controlled servers? Has any party asked to change the ship-from airport, the consignee, or the named executive after the quote? Are the funds coming from a company whose trade has nothing to do with computing? Is the reseller newer than the product generation it is trying to move in volume? Would you be comfortable reading the end-use statement out loud to a regulator?

If the answer to the last one is a wince, you already have your decision. Controlled hardware is not a commodity you can apologize for later. The statute gives the apology a long possible sentence, and the market gives everyone else a longer questionnaire.

The arrest in Los Angeles County does not close the gray market for advanced servers. It does put a price, in years and in reputation, on one alleged way of routing them. More than $300 million is a figure that will be cited in compliance training for a while, next to a lumber company that wanted H100s and a flight path that did not match the purchase order. That pairing is specific enough to remember. Specific is what makes a warning useful.

Until a court tests the evidence, the fair summary is narrow. A California man who ran a young computer firm stands accused of helping move a very large quantity of restricted servers toward China through Malaysian and Singaporean routes, using front paperwork and misstated buyers, while Malaysian money paid for American hardware. He faces serious statutory exposure if convicted. The companies named around him have not been charged. The machines, if the shipments happened as described, are already wherever the last consignee put them. The argument about who was allowed to have them is just getting started.